Displaying 1 result from an estimated 1 matches for "rxws".
Did you mean:
rxs
2005 Apr 11
1
/etc/rc.bsdextended: am I misunderstanding this..?
Can someone clear something up for me?
[[[
# For apache to read user files, the ruleadd must give
# it permissions by default.
####
${CMD} add subject uid 80 object not uid 80 mode rxws;
${CMD} add subject gid 80 object not gid 80 mode rxws;
]]]
Doesn't the above mean that an apache user (eg, user-supplied CGI
process, PHP script, etc) has the ability to read (and write!) anything
in the filesystem?
Similarly: mailnull, majordomo, bin, etc, appear to get "elevated&quo...