Path: csiph.com!usenet.pasdenom.info!news.albasani.net!newsreader4.netcologne.de!news.netcologne.de!xlned.com!feeder7.xlned.com!newsfeed.xs4all.nl!newsfeed2.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <python-python-list@m.gmane.org>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.003
X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; 'scripts': 0.03; '(at': 0.04; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'runs': 0.10; 'python': 0.11; 'apache': 0.15; 'invocation': 0.16; 'message- id:@4ax.com': 0.16; 'received:80.91.229.3': 0.16; 'received:plane.gmane.org': 0.16; 'sat,': 0.16; 'ownership': 0.19; 'restrictions': 0.19; 'putting': 0.22; 'url:home': 0.24; 'file.': 0.24; 'script': 0.25; 'header:X-Complaints-To:1': 0.27; 'appear': 0.29; 'rest': 0.29; 'unix': 0.29; '(since': 0.31; 'cgi': 0.31; 'controlled': 0.31; 'file': 0.32; 'probably': 0.32; 'subject:from': 0.34; 'case,': 0.35; 'but': 0.35; 'charset:us- ascii': 0.36; 'received:76': 0.38; 'system,': 0.38; 'to:addr :python-list': 0.38; 'rather': 0.38; 'to:addr:python.org': 0.39; 'enough': 0.39; 'received:org': 0.40; 'how': 0.40; 'even': 0.60; 'more': 0.64; 'capable': 0.67; 'jul': 0.74; 'subject:Location': 0.84; '2013': 0.98
X-Injected-Via-Gmane: http://gmane.org/
To: python-list@python.org
From: Dennis Lee Bieber <wlfraed@ix.netcom.com>
Subject: Re: Geo Location extracted from visitors ip address
Date: Sat, 06 Jul 2013 18:36:33 -0400
Organization: IISS Elusive Unicorn
References: <kr75jj$eqv$1@news.grnet.gr> <mailman.4310.1373054197.3114.python-list@python.org> <kr7me1$jco$1@news.grnet.gr> <kr7mjs$jco$2@news.grnet.gr> <kr7n56$jco$3@news.grnet.gr> <mailman.4319.1373072195.3114.python-list@python.org> <kr7qq2$vqj$1@news.grnet.gr> <mailman.4322.1373079131.3114.python-list@python.org> <kr8ft0$g65$1@news.grnet.gr> <mailman.4338.1373121805.3114.python-list@python.org> <kr9tmk$qdu$1@news.grnet.gr>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Gmane-NNTP-Posting-Host: adsl-76-249-28-241.dsl.klmzmi.sbcglobal.net
X-Newsreader: Forte Agent 6.00/32.1186
X-No-Archive: YES
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.4349.1373150202.3114.python-list@python.org>
Lines: 23
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1373150202 news.xs4all.nl 15936 [2001:888:2000:d::a6]:34137
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:50090

On Sat, 06 Jul 2013 23:12:02 +0300, ????? Gr33k <nikos@superhost.gr>
declaimed the following:

>I though that the ownership of the script file controlled the privileges 
>it runs under.....
>
	The owner can control /who/ runs the script -- via Group and Other
settings... But the access privileges to the rest of the system are
controlled by the process that runs the script -- in this case, Apache is
probably spawning a process (since you appear to be using classical CGI
invocation rather than a framework) that runs Python for each invocation.

	The privileges, thereby, are those of Apache (at best -- I don't know
UNIX systems well enough to know if Apache is capable of putting even more
restrictions on subprocesses).

	Depending on how the scripts are put into Apache's CGI system, Apache
may even be the owner of the script file.

-- 
	Wulfraed                 Dennis Lee Bieber         AF6VN
    wlfraed@ix.netcom.com    HTTP://wlfraed.home.netcom.com/