RE: [PHP] tar and ownership

From: Date: Fri, 21 Nov 2003 19:57:57 +0000
Subject: RE: [PHP] tar and ownership
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-170622@lists.php.net to get a copy of this message
it's part of Tar (see: tar --help) I'm sure there are restrictions to Non-Root users (I don't think many *nix developers are stupid enough to let open that sort of bug >> -----Original Message----- >> From: Wouter van Vliet [mailto:wouter@springt.nl] >> Sent: Saturday, November 22, 2003 8:53 AM >> To: 'Nigel Jones'; 'Rodney Green' >> Cc: php-general@lists.php.net >> Subject: RE: [PHP] tar and ownership >> >> >> Nigel Jones wrote: >> > I think if you are using the Unix Tar Version you can do tar >> > -C /scripts/ -zxv -f ./scripts/mailfiles.tar.gz >> > --owner=REPLACEME --group=REPLACEME >> > >> >> I sure hope this is NOT possible, since it would be a major security >> problem. Think for example in terms of the php safe_mode. When you'd do >> this, you would be able to create files as any user thinkable, >> and thus well >> .. Need I go any further. >> >> Knowing that 'chown' only lets you change the 'group' part of >> the ownership >> to a group you actually belong to FROM files that are owned by >> yourself and >> I think even the group part has to mach too. >> >>

« previous php.general (#170622) next »