Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.mixmin.net!rt.uk.eu.org!newsfeed.xs4all.nl!newsfeed4.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.103 X-Spam-Level: * X-Spam-Evidence: '*H*': 0.80; '*S*': 0.01; 'charset:iso-8859-7': 0.04; 'linux,': 0.07; 'happen?': 0.09; 'question?': 0.09; 'subject:script': 0.09; 'random': 0.14; 'existance': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'ops': 0.16; 'subject:Apache': 0.16; 'subject:issue': 0.16; 'subject:run': 0.16; 'subject:python': 0.16; 'do,': 0.16; 'wrote:': 0.18; 'all,': 0.19; 'thu,': 0.19; 'shell': 0.22; 'possibly': 0.26; 'header:In-Reply-To:1': 0.27; 'idea': 0.28; 'am,': 0.29; 'strongly': 0.30; 'then.': 0.30; 'message- id:@mail.gmail.com': 0.30; 'subject:that': 0.31; "they'll": 0.31; 'way?': 0.31; 'but': 0.35; 'received:google.com': 0.35; 'problems': 0.38; 'gmail': 0.38; 'to:addr:python-list': 0.38; 'ability': 0.39; 'expect': 0.39; 'to:addr:python.org': 0.39; 'how': 0.40; 'even': 0.60; 'future': 0.60; 'access,': 0.60; 'is.': 0.60; 'solve': 0.60; 'most': 0.60; 'new': 0.61; 'account': 0.65; 'customers': 0.66; 'dont': 0.67; 'believe': 0.68; 'internet': 0.71; 'money': 0.72; 'bank': 0.76; 'gain': 0.79; 'transfer': 0.82; 'low': 0.83; 'usage.': 0.84; 'info,': 0.91; 'joel': 0.91; 'subject:let': 0.93; '2013': 0.98 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=BLgMzPpc9TZlNn172+wUhU8rhfGbcK+I2zWq0v1bxPY=; b=r6c5fmi60hBsKVgFR0crrQUfO1pM5u9FgMC2C8v6pLREoPQKWlHObVXbrgNdW6roiU xPFNyKTKu7o6xcYwL5U1xFPvLV3yuvTn8f+iSYKd0RBd6RiQEOXN3/Ru2FHNvkFXAraE 9GdU4iEbBchO+JP+D/dTHmT1nN1rwHn/+elIbYPbRECiycZlN3w5PzKYR+QdSaCKoAc7 Vuy8xpiJZ4+YKlHoy6AcM7jYrqD1Mw9IPmjcySq8GmInzeei3oiRHjo+wp7Vkb4+te3f 545JVCEc8rWkeV7jV4HJ0Pv29pT6VWQ13i6pZ9QytSeEmqrqKq0L4RRGBLn+ivN+MX9v Q98Q== MIME-Version: 1.0 X-Received: by 10.220.167.69 with SMTP id p5mr20654939vcy.57.1370452745778; Wed, 05 Jun 2013 10:19:05 -0700 (PDT) In-Reply-To: <4e6be3f5-8840-49b7-8385-e9ad9a14b50e@googlegroups.com> References: <20a49aac-3867-481f-96d4-c95a050781ed@googlegroups.com> <4b65cdfe-b6c2-4d97-8623-77b10711bf78@googlegroups.com> <2ecc95c4-6114-49a6-ad47-df7bae4adfde@googlegroups.com> <592c84d8-2e86-4480-b784-c3ccadc8360d@googlegroups.com> <06fd6c2e-0979-4d61-b75a-6d9df7c1b624@googlegroups.com> <70390d65-5313-46bf-8110-b25f5fc9f76f@googlegroups.com> <4e6be3f5-8840-49b7-8385-e9ad9a14b50e@googlegroups.com> Date: Thu, 6 Jun 2013 03:19:05 +1000 Subject: Re: Apache and suexec issue that wont let me run my python script From: Chris Angelico To: python-list@python.org Content-Type: text/plain; charset=ISO-8859-7 Content-Transfer-Encoding: quoted-printable X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 31 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1370452753 news.xs4all.nl 15901 [2001:888:2000:d::a6]:44536 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:47117 On Thu, Jun 6, 2013 at 3:05 AM, =CD=E9=EA=FC=EB=E1=EF=F2 =CA=EF=FD=F1=E1=F2= wrote: > I grant shell access to very new account i create but some of my customer= s dont evn know the existance of linux, and the other that do, have no idea= of what a shell access is. But i grant them the ability just in cae for fu= ture usage. > > Most of them are doign the work via cPanel tools. I would strongly recommend NOT giving shell access, then. The chances are low that they'll ever need it, and you improve your security significantly by closing it off. On Thu, Jun 6, 2013 at 3:07 AM, =CD=E9=EA=FC=EB=E1=EF=F2 =CA=EF=FD=F1=E1=F2= wrote: > =D4=E7 =D4=E5=F4=DC=F1=F4=E7, 5 =C9=EF=F5=ED=DF=EF=F5 2013 7:35:48 =EC.= =EC. UTC+3, =EF =F7=F1=DE=F3=F4=E7=F2 Joel Goldstick =DD=E3=F1=E1=F8=E5: > >>To solve the OPs problems once and for all, I believe we need to know his= >social security number and his mother's maiden name. (Yes, i know SSN is= for US >but... ) > > Even if i gibe you that info, what can you possibly expect to happen? > Gain access to my Gmail account because you stuck in its security questio= n? What about: gain access to your bank account the same way? How would you feel about random people on the internet having the ability to transfer money on your behalf? ChrisA