Re: Loging in to mike

["Geoff O'Callaghan" <geoff@asri.org.au>]

On Tue, 19 Oct 2004 04:13 am, Ron Wickersham wrote:
> hi All,
>
> the issue of publishing logins (including passwords) serves the purpose
> of giving wide access to the file.

yes true, but giving even a non-privileged account to an undesirable is one 
step closer to having to rebuild your system :-(

>
> wouldn't our goal of wide distribution be served by linking the directories
> to apache?  this way the (normally accceptable) security of apache to
> serve files makes the security issue go away.   after all, the worker
> user is not granted write privileges anyway.
>

Yes, that'd be the ideal.  I'm not sure of what the goal is here.  There are 
usually several ways of doing things :-)

-goc-