RE: [PHP] tar and ownership
| From: | Nigel Jones | Date: | Fri, 21 Nov 2003 19:57:57 +0000 |
| Subject: | RE: [PHP] tar and ownership | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-170622@lists.php.net to get a copy of this message | ||
it's part of Tar (see: tar --help)
I'm sure there are restrictions to Non-Root users (I don't think many *nix
developers are stupid enough to let open that sort of bug
>> -----Original Message-----
>> From: Wouter van Vliet [mailto:wouter@springt.nl]
>> Sent: Saturday, November 22, 2003 8:53 AM
>> To: 'Nigel Jones'; 'Rodney Green'
>> Cc: php-general@lists.php.net
>> Subject: RE: [PHP] tar and ownership
>>
>>
>> Nigel Jones wrote:
>> > I think if you are using the Unix Tar Version you can do tar
>> > -C /scripts/ -zxv -f ./scripts/mailfiles.tar.gz
>> > --owner=REPLACEME --group=REPLACEME
>> >
>>
>> I sure hope this is NOT possible, since it would be a major security
>> problem. Think for example in terms of the php safe_mode. When you'd do
>> this, you would be able to create files as any user thinkable,
>> and thus well
>> .. Need I go any further.
>>
>> Knowing that 'chown' only lets you change the 'group' part of
>> the ownership
>> to a group you actually belong to FROM files that are owned by
>> yourself and
>> I think even the group part has to mach too.
>>
>>