Cool program, but....

in reply to Emergency Sentry Robot

I do like the program. The concept is quite nice. But, I think you are hitting things in the wrong direction. You said you were "responsible" for the server. I take that to mean you are the admin. So, why would you have it set up such that people could read other's home dirs? Why wouldn't you chroot everyone and restrict their sphere's of influence? Or, at the least, set perms and masks such that read and execute are not allowed to other users.

I used to do UNIX admin on similar machines and we ALWAYS did this. We had some web apps (Perl & PHP) that we sold to some clients and not others. For the most part even the client that bought the program didn't get even read access to the source. I think you need to reassess the security of the box in general.

Comment on Cool program, but....

Replies are listed 'Best First'.
RE: Cool program, but.... by Aighearach (Initiate) on Sep 14, 2000 at 02:30 UTC
There is of course no way to protect a user dir from the root account. Paris Sinclair \| 4a75737420416e6f74686572 pariss@efn.org \| 205065726c204861636b6572 http://sinclairinternetwork.com	[reply]

In Section Cool Uses for Perl