116 reputation
4
bio website blakeminer.com
location
age
visits member for 3 years, 8 months
seen Dec 1 at 15:49

Dec
14
comment Security implications of adding www-data to /etc/sudoers to run php-cgi as a different user
As you mentioned, www-data can already execute php-cgi. I guess my question is regarding this line: www-data ALL = (%www-data) NOPASSWD: /usr/bin/php-cgi. Does this only allow www-data to execute php-cgi as any user in the www-data group? If so, I don't think this makes the system any less secure, right? You have to be explicitly added to the www-data group to run php-cgi? Then, once php-cgi is running, you can't "sudo" again, right?
Dec
13
comment Security implications of adding www-data to /etc/sudoers to run php-cgi as a different user
Thanks for the insight! +1 But it didn't quite answer my question.
Dec
13
comment How can I run Debian stable but install some packages from testing?
What if a new version of "something" becomes available in "testing?" Will apt-get upgrade automatically update it to the latest version under this configuration? Or, does it wait for the later version to become available in "stable?"
Oct
11
awarded  Student
Oct
3
awarded  Tumbleweed
Sep
26
asked Security implications of adding www-data to /etc/sudoers to run php-cgi as a different user
May
22
comment Can I have Postfix relay for everyone on a second port?
@crb - Right. If you do mynetworks=10.0.0.0/8, you expose relay access to all EC2 instances. Any EC2 instance can relay mail through your server. That assumes you opened that port to the outside world. EDIT - or wait... expose port 25 to the world, then only open port 26 to your instances in that security group. Done.
Sep
27
awarded  Teacher
Sep
27
answered Why my samba printer is not visible (after boot) until i restart smb?
Apr
14
awarded  Supporter