4 ms·
Fun little project. Well done. Giving a public facing application sudo powers (even limited ones) is a little scarey. If I understood your documentation I beli
by chrisfarms 14y ago
Fun little project. Well done.
Giving a public facing application sudo powers (even limited ones) is a little scarey. If I understood your documentation I believe if I somehow got onto your box I could escalate to root just by editing your iptables scripts. You probably want to ensure www-data (or anyone) cannot write to these files :-)
- julien421 14y agoouch! thank you! :) let's -w!
- chrisfarms 14y agoHere's a nice comment on some of the dangers of setuid/sudo on shell scripts. The more you know... http://unix.stackexchange.com/questions/364/allow-setuid-on-shell-scripts/2910#2910 http://unix.stackexchange.com/questions/364/allow-setuid-on-...