DAV

Joe Orton jorton at redhat.com
Thu Oct 7 16:41:38 UTC 2004


On Thu, Oct 07, 2004 at 11:57:27AM -0400, Alan Cox wrote:
> On Thu, Oct 07, 2004 at 04:49:10PM +0100, Joe Orton wrote:
> > The *client* doesn't care about ~user directories.  Having a DAV server
> > which can manipulate files in ~user directories under ownership of said
> > user requires running the server as root, which is really not something
> > you want to do.
> 
> Your apache needs to have setfsuid rights, that is all

Are you talking about capabilities or SELinux policy there?  Does the
capability bit not then allow children to setfsuid(0) and write files as
root?

joe




More information about the fedora-devel-list mailing list