nobody has write permissions all over???

Hi,

I just discovered the following by accident.

I set up a cgi-script on a different instance of the webserver but on the same host.

This cgi-script is able to write into any and all branch workareas I have under /iwmnt/default/main

The webserver_uid (nobody) is NOT a member of any of the groups that own these branches & workareas. The cgi-script in question is NOT using setuid, so that it only runs as 'nobody'. The file that it writes has the owner as 'nobody' & the appropriate group for that branch/workarea (as seen from File Properties Menu & file system)

Could someone explain why 'nobody' has these privileges?

Thanks for your help.

- ashok

Find more posts tagged with

Comments

Valentine

umm .. what are the permissions for workareas and files? Sounds like they are at least read,write by others.

ashokc

All the workareas are created with 2775

or

rwxrwsr-x

permissions. I use setgid on the workarea so the any content placed in there will inherit the right group so it may be shared by that group.

- ashok