As root (assuming running with set -e):

  d=`mktemp -d`
  install -d -m 700 -o nobody "$d"/writable
  (cd "$d"/writable && su nobody -c 'wget ...')

User `nobody' can write into this `writable' directory, but only for a
process that has already cd'd into it as root before becoming nobody:
the "$d" directory is executable only by root.

pjrm.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to