tech-userlevel archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: libexec/httpd and unsorted directory index



>>> Instead of embedding sorting knowledge in the daemon, why not
>>> popen(3) another binary and let it do the whole job?
>> Then you have to provide httpd with an environment in which it can
>> execute other programs.  Some of us prefer running things chrooted
>> and neutered.
> For it to work, yes.  If you don't provide that, then you get
> unsorted directories.

Also, even people who chroot daemons are sometimes willing to let them
have access to a few carefully-chosen additional tools.  My own
public-facing ftpd, for example, has (rather restricted) access to a
few programs like gzip, so it can do conversions on the fly.  I decided
the additional risk was worth the benefit brought.

/~\ The ASCII                           der Mouse
\ / Ribbon Campaign
 X  Against HTML               mouse%rodents.montreal.qc.ca@localhost
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B



Home | Main Index | Thread Index | Old Index