Re: Protections on inetd (and /sbin/* /usr/sbin/* in general)

[Dag-Erling Smorgrav]

Matt Dillon <[EMAIL PROTECTED]> writes:
>     The real problem here is the CGI script / server-side design allowing
>     the breakin in the first place. 

That's not a fixable problem when the customer is meant to provide his
own scripts. I've worked on such a scenario before; we managed to
chroot the scripts so we're reasonably confident that they can't do
much harm except to themselves.

DES
-- 
Dag-Erling Smorgrav - [EMAIL PROTECTED]


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message