in reply to Using SCP from CGI
Make the owner of your script someone who has very few priviledges and then run your script Set UID. On *ix just do chmod 4750 (which will make it SetUID owner, r+w+x owner,r+x group, nothing world). Then you can make the key for the user who owns the script.
The only thing to remember is that SetUID automagically puts Perl in Taint mode so you'll have to check your input. But that's not so bad because you should be running CGI scripts in taint mode anyway :)
Hope that helps
Chris Some clever or funny quote here.
|
|---|