wwwacct bug

[Arthur]

Hello Nick,

I think you should move the following lines from line 791 to line 813 in /scripts/wwwacct.

if (-e "/var/cpanel/fileprotect") {
my $httpgid = (getpwnam('nobody'))[3];
my $useruid = (getpwnam($user))[2];
chown $useruid,$httpgid, "$mnt/$user/public_html";
chmod 0750, "$mnt/$user/public_html";
}

cPanel.net Support Ticket Number:

[cpanelnick]

Originally posted by Arthur
Hello Nick,

I think you should move the following lines from line 791 to line 813 in /scripts/wwwacct.


cPanel.net Support Ticket Number:

Probably a good idea (thats why its marked experimental in easyapache)

cPanel.net Support Ticket Number:

[Arthur]

Hi Nick,

Another bug was found: After using WHM and Cpanel to install Frontpage, folder public_html will be chgrp to owner. Could you please fix this?

Thank you.

cPanel.net Support Ticket Number:

[tAzMaNiAc]

Originally posted by Arthur
Hi Nick,

Another bug was found: After using WHM and Cpanel to install Frontpage, folder public_html will be chgrp to owner. Could you please fix this?

Thank you.

cPanel.net Support Ticket Number:

Hint: send in support ticket too.

cPanel.net Support Ticket Number:

[Arthur]

Ticket submitted.

cPanel.net Support Ticket Number: 19092

[goodmove]

Originally posted by Arthur
Hi Nick,

Another bug was found: After using WHM and Cpanel to install Frontpage, folder public_html will be chgrp to owner. Could you please fix this?

Thank you.

Isn't that how it's supposed to be? Isn't the group always the same as the username?

[cpanelnick]

Its fixed in the latest /scripts

cPanel.net Support Ticket Number:

[Arthur]

Originally posted by goodmove
Isn't that how it's supposed to be? Isn't the group always the same as the username?

If you use webroot protection (an experimental option in easyapache), public_html will be chgrp to nobody and chmod to 750, which can avoid that someone steals other users' data via shell or cgi.

cPanel.net Support Ticket Number:

[tAzMaNiAc]

Originally posted by Arthur
If you use webroot protection (an experimental option in easyapache), public_html will be chgrp to nobody and chmod to 750, which can avoid that someone steals other users' data via shell or cgi.

cPanel.net Support Ticket Number:

Is this option working ok now with the latest scripts? if so, I can go rebuild my apache to add this webroot protection.

cPanel.net Support Ticket Number:

[Arthur]

Originally posted by tAzMaNiAc
Is this option working ok now with the latest scripts? if so, I can go rebuild my apache to add this webroot protection.

Yes, Nick has fixed it.

cPanel.net Support Ticket Number:

[cpanelnick]

Originally posted by tAzMaNiAc
Is this option working ok now with the latest scripts? if so, I can go rebuild my apache to add this webroot protection.

cPanel.net Support Ticket Number:

I'm using it on my box now

cPanel.net Support Ticket Number:

[tAzMaNiAc]

Originally posted by bdraco
I'm using it on my box now

cPanel.net Support Ticket Number:

Thanks

All sounds great! I will do this tonight.

cPanel.net Support Ticket Number:

[mmkassem]

Do I have to recompile apache or just use:
/scripts/enablefileprotect
?

cPanel.net Support Ticket Number:

[cpanelnick]

Originally posted by mmkassem
Do I have to recompile apache or just use:
/scripts/enablefileprotect
?

cPanel.net Support Ticket Number:

Just the script

cPanel.net Support Ticket Number:

[jamesbond]

Originally posted by Arthur
If you use webroot protection (an experimental option in easyapache), public_html will be chgrp to nobody and chmod to 750, which can avoid that someone steals other users' data via shell or cgi.

I don't think I quite follow what it is supposed to do then.

If you don't run phpsuexec, people can still use php scripts to snoop around, as user nobody, in other users' directories, right?

cPanel.net Support Ticket Number: