Re: [cobalt-security] cgiwrap users

[Jeff Lovell <jlovell@xxxxxxx>]

On Thu, 07 Jun 2001, Dave Worth wrote:

> "Execution of (nobody) is not permitted for the following reason:
> 
>                           User not Privileged."
> 
> Does anyone know how to work around this and/or where the cgiwrap config 
> files are so I may add user nobody into the permissions list?

That is a risky proposal.  Frontpage enabled sites are owner by the
user 'nobody'.  And allowing the CGI scripts to run as user 'nobody'
will put sites at risk from attacks with CGI scripts.

You may just want to disable cgiwarp for the directory.  Searching
the cobalt-users archive for "disable cgiwrap" should give you
a few suggestions on how to proceed.

http://list.cobalt.com/mailman/listinfo/cobalt-users/

Jeff

-- 
Jeff Lovell
Sun Microsystems Inc.