bug#240: random_seed file = SECURITY BUG
Thu, 17 Aug 2000 21:41:59 +0200 (MET DST)
Paul Rubin wrote:
> No he can't. GPG and my login script are write protected. But the
> random_seed file has to be world writeable or else my cgi script can't
> update it (since the cgi script runs as "nobody").
Can't this be changed? I made a special user to run Apache under when I
setup a webserver for a client to prevent this kind of problems.
ir. J.C.A. Wevers // Physics and science fiction site:
email@example.com // http://www.xs4all.nl/~johanw/index.html
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html
Archive is at http://lists.gnupg.org - Unsubscribe by sending mail
with a subject of "unsubscribe" to firstname.lastname@example.org