Date: Mon, 13 Apr 1998 13:09:17 +0000 From: Niall Smart <rotel@indigo.ie> To: leifn@image.dk (Leif Neland), freebsd-questions@FreeBSD.ORG Subject: Re: password change via the web?! Message-ID: <199804131209.NAA01145@indigo.ie> In-Reply-To: leifn@image.dk (Leif Neland) "Re: password change via the web?!" (Apr 12, 8:58pm)
next in thread | raw e-mail | index | archive | help
On Apr 12, 8:58pm, Leif Neland wrote: } Subject: Re: password change via the web?! > At 12 Apr 98 18:45:06 Niall Smart wrote regarding Re: password change via the > web?! > > NS> Really? I hope not :) Another option would be to make it a > NS> suid root shell script BUT with only the web server having > NS> execute permission through supplementary groups. > > No need to suid to root, just suid to the user you want to change password for. > To do that, you need the password for the user. Good point, even does the necessary password checking for you. -- Niall Smart. Microsoft Suck. See www.freebsd.org for details. echo "#define if(x) if(!(x))" >> /usr/include/stdio.h To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199804131209.NAA01145>