version a5.0

Date: Tue, 17 Dec 1996 17:49:04 -0400
From: David Trueman <david@cs.dal.ca>
To: MACN admin <admin@macn.bc.ca>
cc: csuite-dev <csuite-dev@chebucto.ns.ca>

next message in archive
no next message in thread
previous message in archive
previous message in thread
Index of Subjects

Index of Subjects

A few things.  I have made mods. to our local test lynx (based on the the 
latest development version) to disallow browsing of directories that are 
not writeable by the user.  This preserves the ability of the user to browse
their own files and IP areas for which they are responsible.  It does not 
protect against looking at any particular world-readable file (like 
/etc/passwd)

They should not be able to browse any log directories even now, since 
those directories should not be readable by regular users.

On Mon, 16 Dec 1996, MACN admin wrote:

> is there a way to stop a user from getting to the root file system when
> they hit the "goto" key and enter "/". i have seen one system hack this so
> that you could not do this. the user can see all the file system, they
> could possible down load the passwd file and such or a least do screen
> dumps of the such.
> 
> i know one user on our system has made bookmarks to some of the log files
> this way.
> 
> 
>    *-------------------------------------------------------------------*
>    |                 Mt. Arrowsmith Community Network                  |   
>    |  admin@macn.bc.ca                          http://www.macn.bc.ca  |
>    | Providing low cost access to the Internet for the general public. |
>    *-------------------------------------------------------------------*
> 
> 

  David Trueman,
    Systems Manager, Dalhousie Math, Stats and Computing Science
    Technical Chair, Chebucto Community Net


next message in archive
no next message in thread
previous message in archive
previous message in thread
Index of Subjects