Re: [cobalt-security] Anyone seen this before ?

[Bill Irwin <bill_irwin@xxxxxxxx>]

Malcolm,

When you publish sites with Frontpage, it sets up the user group as
"nobody". I don't think this is a big worry, since Frontpage REQUIRES
their pages to be this way. If you intend to upload CGI's on a frontpage
site, you should FTP them to the location and make sure privs are set as
chmod 755 *NOT* 777...that would be bad!


Malcolm Wild wrote:
> 
> was:
> drwxrwsr-x   5 httpd    site57       1024 Feb  7 14:38 site57
> now:
> ?--Sr-s---   0 4120     root          416 Jan  1  1970 site57
> WHY!?!
> 
> How can I convert the ? 'file' back to a folder again
> 
> Also:
> drwxrwsr-x   5 nobody   site61       1024 Jun  8  2000 site61
> some later site are created as NOBODY not httpd but httpd running as user
> root??
> I can't have nobody as the site owner for all the domains cos anyone can
> read write anywhere!
> 
> RaQ2 total standard patched up
> only root has telnet/ssh
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security

-- 
Bill Irwin
Technical Support Engineer
Sun Microsystems, Inc.