[Xitami] security question about Xitami & CGI's

Marc Doigny xitami@lists.xitami.org
Fri, 15 Oct 2004 18:27:30 +0200


At 18:01 15/10/04, you wrote:
>At 05:50 PM 10/15/2004 +0200, you wrote:
> >Hello !
> >
> >Any cgi program has the same right as the webserver.
> >Under windows nt5, you can create a specific user with limited rights and
> >run the webserver as this user.
> >
> >First create a new user with the correct access rights, then change the
> >Xitami rights to that of the user (start/programs/administrative
> >tools/services, and locate Xitami somewhere at the end of the list, right
> >click on the log on as and change to the new user)
>
>Thanks I'll try changing the settings for this.
>I run the Xitami in console mode though and not as a service.
>I'll go check what it looks like.

It looks like... just nothing.
Services don't interracy with the desktop.
However, services are started before a user logs on.
The service version should be more robust than the console version: it's 
worth a try-out.



--::Mailserver Verfaillie Bauwens::-- contact [postmaster@verfaillie.com]
Alle mails gecontroleerd op virussen. Virusdefinities dagelijks aangepast.
http://www.verfaillie.com