note 8646 added to chown
| From: | njs+php at scifi dot squawk dot com | Date: | Fri, 22 Sep 2000 03:28:33 +0000 |
| Subject: | note 8646 added to chown | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-5313@lists.php.net to get a copy of this message | ||
If you allow sudo execution for chmod by nobody in this manner, it had better be a system on which
the owner is able to be root and no one else can run code, else your whole system is compromised.
Someone could change the mode of /etc/passwd or the shadow password file.
Other system commands (sudo mount) and so forth are similar.
http://www.php.net/manual/function.chown.php