From owner-freebsd-isp Fri Jun 6 05:59:02 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id FAA18449 for isp-outgoing; Fri, 6 Jun 1997 05:59:02 -0700 (PDT) Received: from moebius.space.net (qmailr@moebius.Space.NET [195.30.1.25]) by hub.freebsd.org (8.8.5/8.8.5) with SMTP id FAA18444 for ; Fri, 6 Jun 1997 05:58:59 -0700 (PDT) Received: (qmail 8500 invoked from network); 6 Jun 1997 12:58:52 -0000 Received: from moebius.space.net (et@195.30.1.25) by moebius.space.net with SMTP; 6 Jun 1997 12:58:52 -0000 Date: Fri, 6 Jun 1997 14:58:52 +0200 (MET DST) From: Thomas Eisenbock To: "'freebsd-isp@FreeBSD.ORG'" Subject: Re: Micro$oft FrontPage extensions? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-isp@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk On Fri, 6 Jun 1997, Steve Hovey wrote: > Ill get flamed for this but - I wont touch that with a 10 foot pole - you > open security holes. Of course you'll get flamed, 'cause you are wrong :) You can isntall FrontPage Server Extensions secure enough to prevent damage to your system and to other user's data. As long as you have a secure multiuser webhosting environment (with apache or CERN httpd, for example) you can install Vermeer's FrontPage Server Extensions without having to worry about security. You just have to install it like a customer's CGI Script and set the appropriate rights for the files/directories according to your security policies. As FP Server Extensions don't have to run as root (anymore) and needn't be SUID (even if M$ consideres this "secure"), it's nothing else than a user cgi-bin. The only danger is, that you have to execute binaries from a third party vendor that may be able to execute other programs without your knowledge, but that's why we use Unix ;) e.t. -- SpaceNet - Gesellschaft f. http://www.spaceweb.de/ innovative Netzwerktechnik mbH webmaster@space.net Muenchner Technologie Zentrum Frankfurter Ring 193a Telefon: +49 89 32356-333 D-80807 Muenchen Fax: +49 89 32356-299