wiki:PermissionSetup

Version 5 (modified by anonyme, 7 years ago) (diff)

--

buy valium online acyclovir dosage xanax xr tramadol cod norvasc 5 mg buy ephedra gain lexapro weight buy xanax buy cheap carisoprodol tadalafil alternative hydrocodone effects glucophage side hydroxycut with ephedrine buy cheap celexa norvasc 5mg prevacid side effects buy online codeine buy xanax buy hydrocodone online ephedrine diet pills information zanaflex norvasc side effects buy online ultram xanax norvasc side effects cheap propecia acyclovir online hydroxycut with ephedrine cialis online cheap ephedra buy cialis cheap diazepam hydrocodone online alcohol lexapro cheap ultracet acomplia treatment alcohol lexapro acyclovir side effects norvasc medication online atenolol cheap ultracet bontril online zyprexa lawyer diazepam bontril sr codeine addiction meridia side effects side effects of xanax alprazolam online celexa side effects of zyprexa bontril sr zithromax side effects glucophage cheap codeine zoloft acomplia generic ultram what does alprazolam look like celebrex dangers of ephedrine cheap xenical buy ambien lexapro withdrawal buy cheap ultracet tramadol online acyclovir buy viagra discount phentermine ambien ephedrine diet pills buy xenical online soma drug klonopin klonopin withdrawal buy ephedra products citrate generic sildenafil meridia buy soma ambien online tramadol phentermine online cheap ultram buy xenical alcohol lexapro cheap tramadol herbal viagra valium online buy bontril buy propecia buy xenical online clomid cheap ultram side effects from lipitor buy ephedra online clomid viagra zyprexa levitra alternative viagra alternative lexapro withdrawal meridia prevacid ambien tadalafil alternative meridia effectiveness zithromax antibiotic buy online ultracet glucophage pcos buy meridia buy prevacid hydrochloride tetracycline bontril buy bontril generic prevacid zanaflex propecia online prevacid solutab soft tab tadalafil gain lexapro weight buy citrate sildenafil lexapro ephedrine codeine addiction tramadol online atenolol and flushing bontril 35mg liquid propecia glucophage xr generic levitra generic levitra buy ephedra ambien online zanaflex buy tetracycline effects lexapro side celebrex generic valium cialis cialis klonopin picture buy cheap celexa generic propecia buy zanaflex cialis buy xanax online carisoprodol buy online propecia online cheap xenical didrex cheap buy valium online lipitor side effects does meridia work hydrocodone online cheap didrex online vicodin acyclovir ephedrine hcl buy cheap ultracet gain lexapro weight bontril 35mg zoloft side effects buy online diazepam prevacid cheap tramadol online vicodin tadalafil alternative rimonabant acomplia does meridia work buy levitra zoloft buy meridia generic prevacid buy meridia hydrocodone no prescription affect nexium side bontril online ephedrine buy ultram vioxx celebrex acyclovir cheap xenical tadalafil alternative carisoprodol buy online tetracycline ambien buy ephedrine buy cheap fioricet generic viagra glucophage pcos lipitor side effects celexa & discontinuation symptoms is ultracet a narcotic lexapro buy ultram online affect nexium side buy ultracet slot machine celebrex klonopin buy vicodin online hydrocodone online buy hydrocodone online cheap viagra buy levitra buy cheap xenical buy cheap ultracet buy xanax online zoloft buy cheap codeine ephedrine hcl buy hydrocodone didrex cheap buy xenical online buy xanax online what does alprazolam look like phentermine online buy atenolol description zolpidem prevacid solutab buy atenolol zoloft suicide valium lexapro symptom withdrawal zanaflex acyclovir side effects gain lexapro weight acyclovir zovirax effects glucophage side propecia hydrocodone online lexapro buy ultram online drug ultracet norvasc 5mg cheap levitra viagra alternative klonopin does meridia work tetracycline hydroxycut with ephedrine acyclovir side effects celexa & discontinuation symptoms buy online celexa affect nexium side buy online ultracet klonopin wafer buy prevacid alcohol lexapro carisoprodol buy online effects nexium side acne tetracycline atenolol hydrocodone no prescription xanax xr buy zanaflex klonopin tadalafil alternative viagra herbal viagra hydroxycut with ephedrine codeine buy diazepam buy ultram buy online codeine cheap diazepam glucophage loss weight generic cialis viagra buy ephedrine generic sildenafil online atenolol acyclovir online generic propecia viagra buy xenical online lipitor side effects buy meridia nexium generic viagra low cost xenical glucophage xr cialis buy atenolol carisoprodol buying norvasc 5mg buy citrate sildenafil buy celexa codeine effects nexium side norvasc clomid side effects lipitor side effects acyclovir medication buy atenolol online tadalafil buy zithromax cheap propecia buy cheap carisoprodol dangers of ephedrine cheap propecia

Ci-bas, on assume que:

  • user est le nom et le uid d'un user alternc
  • alternc est le user UNIX qui roule le serveur d'appli

Zones critiques qui roulent en root dans le serveur d'appli:

  • creation des mailboxes
  • relancer les demons
  • creer les confs apache (peut appartenir au user alternc)

On peut continuer la technique de scripts perl suid permis seulement au user alternc (qui roule le serveur d'appli).

Les permissions, au final:

  1. chown user:user /var/alternc/html/u/user; chmod 775 du home, mais seulement le o+a est modifiable
  2. brouter et ftp permet le chmod
  3. soit:
    • un vhost de bureau par user pour le serveur d'appli XmlRpc roule en su(exec)php comme le user, le reste roule en wwww-data
    • le brouteur devient un simple interface vers le serveur FTP
  4. le user alternc fait partie de tous les groupes "user" (si on a pam_mysql ou le chown ci-haut est user:alternc)

Benefices:

  1. securite amelioree: les fichiers ne sont plus inscriptibles par le webserver par defaut
  2. brouteur web2ftp:
    • pas de probleme a zigouiller avec des rewriterules ou avec des vhosts bureau par user
    • les users FTP normaux peuvent avoir une interface web
    • peut etre utilise dans d'autres projets, peut etre un projet separe, etc...
  3. permet eventuellement un SshServer