John Salerno wrote:

> I guess a blanket process might be a tad risky, but don't you want all CGI
> files to be executable by all?

Typically, I prefer CGI scripts to be executable only the owner. If the web
server runs those scripts as a different user, then that user must also be
permitted to execute the scripts of course.

Also note that "all .py files on my web server" is not necessarily
restricted to CGI scripts -- and therein lies the real gist of my
cautionary note.


Jeffrey
--
http://mail.python.org/mailman/listinfo/python-list

Reply via email to