note 8646 modified in chown by ronabop
| From: | ronabop@php.net | Date: | Thu, 28 Sep 2000 16:04:46 +0000 |
| Subject: | note 8646 modified in chown by ronabop | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-5554@lists.php.net to get a copy of this message | ||
If you allow sudo execution for chmod by "nobody" (www, webdaemon, httpd, whatever user
php is running under)in this manner, it had better be a system on which the owner is able to be root
and no one else can run code, else your whole system is compromised. Someone could change the mode
of /etc/passwd or the shadow password file.
Other system commands (sudo mount) and so forth are similar.
http://www.php.net/manual/function.chown.php