network profile
| bio | website | blakeminer.com |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 2 years, 1 month |
| seen | Mar 5 at 15:09 | |
| stats | profile views | 1 |
|
Dec 14 |
comment |
Security implications of adding www-data to /etc/sudoers to run php-cgi as a different user As you mentioned, www-data can already execute php-cgi. I guess my question is regarding this line: www-data ALL = (%www-data) NOPASSWD: /usr/bin/php-cgi. Does this only allow www-data to execute php-cgi as any user in the www-data group? If so, I don't think this makes the system any less secure, right? You have to be explicitly added to the www-data group to run php-cgi? Then, once php-cgi is running, you can't "sudo" again, right? |
|
Dec 13 |
comment |
Security implications of adding www-data to /etc/sudoers to run php-cgi as a different user Thanks for the insight! +1 But it didn't quite answer my question. |
|
Dec 13 |
comment |
How can I run Debian stable but install some packages from testing? What if a new version of "something" becomes available in "testing?" Will apt-get upgrade automatically update it to the latest version under this configuration? Or, does it wait for the later version to become available in "stable?" |
|
Oct 11 |
awarded | Student |
|
Oct 3 |
awarded | Tumbleweed |
|
Sep 26 |
asked | Security implications of adding www-data to /etc/sudoers to run php-cgi as a different user |
|
May 22 |
comment |
Can I have Postfix relay for everyone on a second port? @crb - Right. If you do mynetworks=10.0.0.0/8, you expose relay access to all EC2 instances. Any EC2 instance can relay mail through your server. That assumes you opened that port to the outside world. EDIT - or wait... expose port 25 to the world, then only open port 26 to your instances in that security group. Done. |
|
Sep 27 |
awarded | Teacher |
|
Sep 27 |
answered | Why my samba printer is not visible (after boot) until i restart smb? |
|
Apr 14 |
awarded | Supporter |
