As root (assuming running with set -e): d=`mktemp -d` install -d -m 700 -o nobody "$d"/writable (cd "$d"/writable && su nobody -c 'wget ...')
User `nobody' can write into this `writable' directory, but only for a process that has already cd'd into it as root before becoming nobody: the "$d" directory is executable only by root. pjrm. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]