Bug#248122: Another approach to permissions

2006-06-30 Thread Justin Pryzby
On Fri, Jun 30, 2006 at 03:16:27PM +1000, Peter Moulder wrote: > As root (assuming running with set -e): > > d=`mktemp -d` > install -d -m 700 -o nobody "$d"/writable > (cd "$d"/writable && su nobody -c 'wget ...') > > User `nobody' can write into this `writable' directory, but only for a >

Bug#248122: Another approach to permissions

2006-06-29 Thread Peter Moulder
As root (assuming running with set -e): d=`mktemp -d` install -d -m 700 -o nobody "$d"/writable (cd "$d"/writable && su nobody -c 'wget ...') User `nobody' can write into this `writable' directory, but only for a process that has already cd'd into it as root before becoming nobody: the "$d"