webalizer security

[midisport]

Hi,

What process runs webalizer each night?

cron?

does it use the user files in /home/user/tmp/webalizer/

or are those just copies the system copies over from another location?

Is there anything preventing a user from creating their own webalizer.hist and trying to crash webalizer with that data?

does the system run webalizer as the user or as root? if as user how?

biggest question : what causes webalizer to run each night - a crontab? which one, where?

thanks much!

[cpdan]

If enabled, its run as part of the cpanellogd daemon (IE no cron). Any data in the ~/tmp dir is created from various system logs. It runs as the user via setuid'ing the process.

Since the user owns the files the user can modify them as they wish.