RE: [PHP] adding unix account via system command
| From: | Peter Houchin | Date: | Wed, 18 Sep 2002 02:30:58 +0000 |
| Subject: | RE: [PHP] adding unix account via system command | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-116678@lists.php.net to get a copy of this message | ||
I am not sure to be totally honest ... but i would have thought you setuid
on add.sh to allow it to add the users but i don't think it would work for
user nobody. ..what if you tried something like this
user nobody (Apache)
calls add.sh (initially started by user nobody)
add.sh changes user to say user admin
useradd runs
add.sh exits user admin
add.sh ends
either that or make sure user nobody is a member of the devel group.. but
that could lead to security issues.
> -----Original Message-----
> From: tim tom [mailto:timtom752002@yahoo.com]
> Sent: Wednesday, 18 September 2002 12:14 PM
> To: Peter Houchin; php-general@lists.php.net
> Subject: RE: [PHP] adding unix account via system command
>
>
> Dear Pete,
> Yes, apache runs as nobody. But I have setuid add.sh. Wouldn't
> that be sufficient ?
>
> --
> tim
>
> --- Peter Houchin <php@vfsa.com.au> wrote:
> > you need to make sure that the web has permission to use that file .. my
> > guess is it don't have permission hence why you can run add.sh from the
> > command line (where your not your web user I'm assuming).
> >
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Autos - Get free new car price quotes
> http://autos.yahoo.com
>