[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: /var/lib/apache/mod-bandwidth world-writable [forwarded]



Hi Philipp,

On Wed, 4 Feb 2004, Philipp Weis wrote:

> Hi,
>
> I got no answers to this on debian-security, maybe it was the wrong list.
> I'm not sure whether this really is a security issue. If it is not, please
> let me know why those directories need to be world-writable or why it is
> not a problem.
>

>From mod-bandwith source/documentation:

 * 3) Create the following directories with "rwx" permission to everybody :
 *    /tmp/apachebw
 *    /tmp/apachebw/link
 *    /tmp/apachebw/master

In this case it would be /var/lib/apache/mod-bandwidth in order to respect
the FHS.

Fabio

-- 
Our mission: make IPv6 the default IP protocol
"We are on a mission from God" - Elwood Blues

http://www.itojun.org/paper/itojun-nanog-200210-ipv6isp/mgp00004.html



Reply to: