Re: execute application from webinterface

2003-11-27 Thread Zeljko Brajdic
On Tue, 2003-09-02 at 20:29, Woon Wai Keen @ doubleukay.com wrote: > - Original Message - > From: "mario ohnewald" <[EMAIL PROTECTED]> > To: > Sent: Tuesday, September 02, 2003 3:53 AM > Subject: execute application from webinterface > > >

Re: execute application from webinterface

2003-11-27 Thread Zeljko Brajdic
On Tue, 2003-09-02 at 20:29, Woon Wai Keen @ doubleukay.com wrote: > - Original Message - > From: "mario ohnewald" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, September 02, 2003 3:53 AM > Subject: execute application from webinterfa

Re: execute application from webinterface

2003-09-04 Thread Adam ENDRODI
On Tue, Sep 02, 2003 at 01:38:24AM +0200, Christopher Taylor wrote: > Jens Gutzeit wrote: > >On Monday 01 September 2003 21:53, mario ohnewald wrote: > >>What is the securest way of starting a application, like ping, from a > >>webinterface as a diffrent user. > what's wrong with making the program

Re: execute application from webinterface

2003-09-04 Thread Adam ENDRODI
On Tue, Sep 02, 2003 at 01:38:24AM +0200, Christopher Taylor wrote: > Jens Gutzeit wrote: > >On Monday 01 September 2003 21:53, mario ohnewald wrote: > >>What is the securest way of starting a application, like ping, from a > >>webinterface as a diffrent user. > what's wrong with making the program

Re: execute application from webinterface

2003-09-03 Thread Joshua Goodall
On Tuesday 02 September 2003 15:44, Ryan Nowakowski wrote: > On Tue, Sep 02, 2003 at 01:38:24AM +0200, Christopher Taylor wrote: > > Jens Gutzeit wrote: > > >On Monday 01 September 2003 21:53, mario ohnewald wrote: > > >>What is the securest way of starting a application, like ping, from a > > >>we

Re: execute application from webinterface

2003-09-02 Thread Joshua Goodall
On Tuesday 02 September 2003 15:44, Ryan Nowakowski wrote: > On Tue, Sep 02, 2003 at 01:38:24AM +0200, Christopher Taylor wrote: > > Jens Gutzeit wrote: > > >On Monday 01 September 2003 21:53, mario ohnewald wrote: > > >>What is the securest way of starting a application, like ping, from a > > >>we

Re: execute application from webinterface

2003-09-02 Thread Jens Gutzeit
On Tuesday 02 September 2003 21:25, mario ohnewald wrote: > Hello! Hi Mario, > > I like the idea of a 2nd apache and the mod_proxy. > But how do you install a 2nd httpd in debian? will i have to build it from > source, or is there a trick with a apache package? Haven't tried this, but just write

RE: execute application from webinterface

2003-09-02 Thread mario ohnewald
Hello! > -Original Message- > From: Jens Gutzeit [mailto:[EMAIL PROTECTED] > Sent: 02 September 2003 18:44 > To: debian-security@lists.debian.org > Subject: Re: execute application from webinterface > > > On Tuesday 02 September 2003 19:25, Jens Gutzeit wrote: &

Re: execute application from webinterface

2003-09-02 Thread Woon Wai Keen @ doubleukay.com
- Original Message - From: "mario ohnewald" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 02, 2003 3:53 AM Subject: execute application from webinterface > What is the securest way of starting a application, like ping, from a > webinterface as a diffrent us

Re: execute application from webinterface

2003-09-02 Thread Jens Gutzeit
On Tuesday 02 September 2003 19:25, Jens Gutzeit wrote: > > what's wrong with making the program suid-to-some-other-user (not root) > > and then just executing it? I reallize this doesn't work for ping, which > > is suid-to-root anyway. > > Well, to be honest, I just have forgotten this option. D

Re: execute application from webinterface

2003-09-02 Thread Jens Gutzeit
On Tuesday 02 September 2003 21:25, mario ohnewald wrote: > Hello! Hi Mario, > > I like the idea of a 2nd apache and the mod_proxy. > But how do you install a 2nd httpd in debian? will i have to build it from > source, or is there a trick with a apache package? Haven't tried this, but just write

RE: execute application from webinterface

2003-09-02 Thread mario ohnewald
Hello! > -Original Message- > From: Jens Gutzeit [mailto:[EMAIL PROTECTED] > Sent: 02 September 2003 18:44 > To: [EMAIL PROTECTED] > Subject: Re: execute application from webinterface > > > On Tuesday 02 September 2003 19:25, Jens Gutzeit wrote: > > &g

Re: execute application from webinterface

2003-09-02 Thread Jens Gutzeit
On Tuesday 02 September 2003 01:38, Christopher Taylor wrote: > Jens Gutzeit wrote: > > On Monday 01 September 2003 21:53, mario ohnewald wrote: > >>What is the securest way of starting a application, like ping, from a > >>webinterface as a diffrent user. > > what's wrong with making the program su

Re: execute application from webinterface

2003-09-02 Thread Woon Wai Keen @ doubleukay.com
- Original Message - From: "mario ohnewald" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 02, 2003 3:53 AM Subject: execute application from webinterface > What is the securest way of starting a application, like ping, from a > web

Re: execute application from webinterface

2003-09-02 Thread Jens Gutzeit
On Tuesday 02 September 2003 19:25, Jens Gutzeit wrote: > > what's wrong with making the program suid-to-some-other-user (not root) > > and then just executing it? I reallize this doesn't work for ping, which > > is suid-to-root anyway. > > Well, to be honest, I just have forgotten this option. D

Re: execute application from webinterface

2003-09-02 Thread Jens Gutzeit
On Tuesday 02 September 2003 01:38, Christopher Taylor wrote: > Jens Gutzeit wrote: > > On Monday 01 September 2003 21:53, mario ohnewald wrote: > >>What is the securest way of starting a application, like ping, from a > >>webinterface as a diffrent user. > > what's wrong with making the program su

Re: execute application from webinterface

2003-09-02 Thread Ryan Nowakowski
On Tue, Sep 02, 2003 at 01:38:24AM +0200, Christopher Taylor wrote: > Jens Gutzeit wrote: > >On Monday 01 September 2003 21:53, mario ohnewald wrote: > >>What is the securest way of starting a application, like ping, from a > >>webinterface as a diffrent user. > what's wrong with making the program

Re: execute application from webinterface

2003-09-02 Thread Mark Suter
Mario, > What is the securest way of starting a application, like ping, from a > webinterface as a diffrent user. > Lets say, to run ping 123.456.789.000 as user user123. Here's my example script to do just this. http://zwitterion.org/software/example-web-admin/ Yours sincerely, Mark Suter

Re: execute application from webinterface

2003-09-02 Thread Ryan Nowakowski
On Tue, Sep 02, 2003 at 01:38:24AM +0200, Christopher Taylor wrote: > Jens Gutzeit wrote: > >On Monday 01 September 2003 21:53, mario ohnewald wrote: > >>What is the securest way of starting a application, like ping, from a > >>webinterface as a diffrent user. > what's wrong with making the program

Re: execute application from webinterface

2003-09-01 Thread Mark Suter
Mario, > What is the securest way of starting a application, like ping, from a > webinterface as a diffrent user. > Lets say, to run ping 123.456.789.000 as user user123. Here's my example script to do just this. http://zwitterion.org/software/example-web-admin/ Yours sincerely, Mark Suter

Re: execute application from webinterface

2003-09-01 Thread Christopher Taylor
Jens Gutzeit wrote: On Monday 01 September 2003 21:53, mario ohnewald wrote: What is the securest way of starting a application, like ping, from a webinterface as a diffrent user. what's wrong with making the program suid-to-some-other-user (not root) and then just executing it? I reallize this do

Re: execute application from webinterface

2003-09-01 Thread Jens Gutzeit
On Monday 01 September 2003 21:53, mario ohnewald wrote: > Hello List! > What is the securest way of starting a application, like ping, from a > webinterface as a diffrent user. > Lets say, to run ping 123.456.789.000 as user user123. > > If i use "system", it executes it as www-data. you need sud

execute application from webinterface

2003-09-01 Thread mario ohnewald
Hello List! What is the securest way of starting a application, like ping, from a webinterface as a diffrent user. Lets say, to run ping 123.456.789.000 as user user123. If i use "system", it executes it as www-data. Any idea how i could solve this problem? With php, perl, bash, etc... ? Thank y

Re: execute application from webinterface

2003-09-01 Thread Christopher Taylor
Jens Gutzeit wrote: On Monday 01 September 2003 21:53, mario ohnewald wrote: What is the securest way of starting a application, like ping, from a webinterface as a diffrent user. what's wrong with making the program suid-to-some-other-user (not root) and then just executing it? I reallize this

Re: execute application from webinterface

2003-09-01 Thread Jens Gutzeit
On Monday 01 September 2003 21:53, mario ohnewald wrote: > Hello List! > What is the securest way of starting a application, like ping, from a > webinterface as a diffrent user. > Lets say, to run ping 123.456.789.000 as user user123. > > If i use "system", it executes it as www-data. you need sud

execute application from webinterface

2003-09-01 Thread mario ohnewald
Hello List! What is the securest way of starting a application, like ping, from a webinterface as a diffrent user. Lets say, to run ping 123.456.789.000 as user user123. If i use "system", it executes it as www-data. Any idea how i could solve this problem? With php, perl, bash, etc... ? Thank y