On Fri, Jun 30, 2006 at 03:16:27PM +1000, Peter Moulder wrote:
> As root (assuming running with set -e):
> 
>   d=`mktemp -d`
>   install -d -m 700 -o nobody "$d"/writable
>   (cd "$d"/writable && su nobody -c 'wget ...')
> 
> User `nobody' can write into this `writable' directory, but only for a
> process that has already cd'd into it as root before becoming nobody:
> the "$d" directory is executable only by root.
I think it is intended that "nobody" never owns any files.  So the
right way to do it probably involves dynamically creating a user, or
using some user guaranteed to exist, like "sys" or "operator".

Justin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to