Re: execute application from webinterface

2003-09-01 Thread Mark Suter
Mario, > What is the securest way of starting a application, like ping, from a > webinterface as a diffrent user. > Lets say, to run ping 123.456.789.000 as user user123. Here's my example script to do just this. http://zwitterion.org/software/example-web-admin/ Yours sincerely, Mark Suter

Re: execute application from webinterface

2003-09-01 Thread Christopher Taylor
Jens Gutzeit wrote: On Monday 01 September 2003 21:53, mario ohnewald wrote: What is the securest way of starting a application, like ping, from a webinterface as a diffrent user. what's wrong with making the program suid-to-some-other-user (not root) and then just executing it? I reallize this do

Re: 2.4.21 IPSEC problems

2003-09-01 Thread Henrique de Moraes Holschuh
On Sun, 31 Aug 2003, Herbert Xu wrote: > Henrique de Moraes Holschuh <[EMAIL PROTECTED]> wrote: > > Herbert, it would be a Very Good Thing if Debian sarge shipped IPSEC ready > > to go out-of-the-box (provided one installed the correct packages and > > configured them, I suppose). > > > > Are we a

Re: Strange email from debian list

2003-09-01 Thread Frans Pop
On Monday 01 September 2003 22:42, Santiago Vila wrote: > On Mon, 1 Sep 2003, Frans Pop wrote: > > Can anyone explain why the mail below was bounced(?) by murphy.debian.org > > to me? > > I did not send the original mail, I am not listed anywhere in the > > original mail and I am not subscribed to

Re: Strange email from debian list

2003-09-01 Thread Santiago Vila
On Mon, 1 Sep 2003, Frans Pop wrote: > Can anyone explain why the mail below was bounced(?) by murphy.debian.org to > me? > I did not send the original mail, I am not listed anywhere in the original > mail and I am not subscribed to debian-i386-changes (nor have been in the > past). > > Thnx. > >

Re: execute application from webinterface

2003-09-01 Thread Jens Gutzeit
On Monday 01 September 2003 21:53, mario ohnewald wrote: > Hello List! > What is the securest way of starting a application, like ping, from a > webinterface as a diffrent user. > Lets say, to run ping 123.456.789.000 as user user123. > > If i use "system", it executes it as www-data. you need sud

execute application from webinterface

2003-09-01 Thread mario ohnewald
Hello List! What is the securest way of starting a application, like ping, from a webinterface as a diffrent user. Lets say, to run ping 123.456.789.000 as user user123. If i use "system", it executes it as www-data. Any idea how i could solve this problem? With php, perl, bash, etc... ? Thank y

Strange email from debian list

2003-09-01 Thread Frans Pop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, Can anyone explain why the mail below was bounced(?) by murphy.debian.org to me? I did not send the original mail, I am not listed anywhere in the original mail and I am not subscribed to debian-i386-changes (nor have been in the past). Th

Re: execute application from webinterface

2003-09-01 Thread Christopher Taylor
Jens Gutzeit wrote: On Monday 01 September 2003 21:53, mario ohnewald wrote: What is the securest way of starting a application, like ping, from a webinterface as a diffrent user. what's wrong with making the program suid-to-some-other-user (not root) and then just executing it? I reallize this

Re: 2.4.21 IPSEC problems

2003-09-01 Thread Henrique de Moraes Holschuh
On Sun, 31 Aug 2003, Herbert Xu wrote: > Henrique de Moraes Holschuh <[EMAIL PROTECTED]> wrote: > > Herbert, it would be a Very Good Thing if Debian sarge shipped IPSEC ready > > to go out-of-the-box (provided one installed the correct packages and > > configured them, I suppose). > > > > Are we a

Re: Strange email from debian list

2003-09-01 Thread Frans Pop
On Monday 01 September 2003 22:42, Santiago Vila wrote: > On Mon, 1 Sep 2003, Frans Pop wrote: > > Can anyone explain why the mail below was bounced(?) by murphy.debian.org > > to me? > > I did not send the original mail, I am not listed anywhere in the > > original mail and I am not subscribed to

Re: Strange email from debian list

2003-09-01 Thread Santiago Vila
On Mon, 1 Sep 2003, Frans Pop wrote: > Can anyone explain why the mail below was bounced(?) by murphy.debian.org to > me? > I did not send the original mail, I am not listed anywhere in the original > mail and I am not subscribed to debian-i386-changes (nor have been in the > past). > > Thnx. > >

Re: execute application from webinterface

2003-09-01 Thread Jens Gutzeit
On Monday 01 September 2003 21:53, mario ohnewald wrote: > Hello List! > What is the securest way of starting a application, like ping, from a > webinterface as a diffrent user. > Lets say, to run ping 123.456.789.000 as user user123. > > If i use "system", it executes it as www-data. you need sud

execute application from webinterface

2003-09-01 Thread mario ohnewald
Hello List! What is the securest way of starting a application, like ping, from a webinterface as a diffrent user. Lets say, to run ping 123.456.789.000 as user user123. If i use "system", it executes it as www-data. Any idea how i could solve this problem? With php, perl, bash, etc... ? Thank y

Strange email from debian list

2003-09-01 Thread Frans Pop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, Can anyone explain why the mail below was bounced(?) by murphy.debian.org to me? I did not send the original mail, I am not listed anywhere in the original mail and I am not subscribed to debian-i386-changes (nor have been in the past). Th