ok heres my problem . I am a total *nix noob and as expected the concept of permissions became a nightmare for me. My problem , to be more specific is that I am using Apache running on perl and I need to chmod some directories to 777 in a certain perl script while creating those directories because otherwise Apache cannot create the directories ( apache logs in as "apache" ) Ok guys i need to get rid of that 777 hole, found that suexec wud be a solution , but it looks like a roundabout way and moreover the whole damn thing sounded too confusing for me.I Know there has to be an easier method than that , so please help u apache and linux geniuses

I am not to hot on this subject myself but if you give us a more precise description of what you want to know may be somebody else wil be able to help.

This is what I read in your meassage.

1. you are trying to use a pearl script to create a directory.

2. you want the script to give the directory CHMOD 777

Stuff that we need to know

1. Are you creating the directories inside another directory if so what permission does that directory have.(are you allowed read and write )

2. a sample of your script so that we can find any mistakes

3.Where is the script bieng run from.(does the user of the script have read and write)

4. what are the error messages that you are\getting.

If you give more info you will get more responses.
There is also the problem of permissions being masked, I know very little about it but if you try CMOD 777 and the root user has set up masking 022 the final chmod will be 755 this is to prevent scripts from creating or deleting files.

__________________
Junk Ked
www.domain-names-registrar.com

no no no its not like i want to chnmod them to 777, its just that apache cant create the directories otherwise. as of rite now the script does give user read and execute, but it is the directories which is the security hole, they have been created with 777 mode(let me repeat otherwise they dont get created. I need some way to get over that so that the external users dont have complete access to the directories

Just create the directory and ask your web host to change the ownership of the directory to "apache" giving it full permissions as the 'user'.

__________________
J de Silva
Learning Journal | GIDForums™ | GIDNetwork™ | GIDWebhosts™ | GIDSearch™

Why not change the chmod of the directory AFTER it is created.

Also it seems strange that your hosting provider would allow 777 to be the default for creating new directories from a user script. As you say it is a security hole.

__________________
Junk Ked
www.domain-names-registrar.com