CGIHTTPServer / not user 'nobody'
Sullivan
sullivan at phreaker.net
Sun Jul 4 07:26:27 EDT 2004
On Sat, 03 Jul 2004 21:00:20 +0200, Sullivan wrote:
> When I run a CGI script (Python) with Python's CGIHTTPServer, it
> should run with the UID of the user 'nobody' (as the documentation
> says).
>
> But if I let the CGI script e.g. create a file, it creates the
> file with the UID of the user who started the CGIHTTPServer.
>
> Any ideas what I am doing wrong here?
Answer to myself:
What I did wrong was not to think first resp. not to read the
source code of CGIHTTPServer; clearly, CGIHTTPServer can only
fork to run the CGI script as user 'nobody' when it is run
by 'root' and not by an arbitrary user. (If an arbitrary user
can't 'su - nobody' without knowing nobody's password, how should
CGIHTTPServer do it :-)
Sorry!
More information about the Python-list
mailing list