Apache and suexec issue that wont let me run my python script

Chris Angelico rosuav at gmail.com
Wed Jun 5 14:16:56 EDT 2013


On Thu, Jun 6, 2013 at 4:08 AM, Νικόλαος Κούρας <nikos.gr33k at gmail.com> wrote:
> Anyway, i should'n have given root access to you, i was a bit worried doing so, but i was also under stress of also correcting this damn encoding issue and i wanted to think you would be the one that finally help solving it.
>
> You shouldnt have gone "that far", just to prove a point.
> Its not that malicious activity didn't occur to me that migth happen, i just like to think that it wont.

Sure, you'd like to think that nothing will ever go wrong. Trouble is,
you can't depend on that. Maybe Steven D'Aprano would have solved your
problem for you... maybe not. Maybe you would have picked someone who
totally smashed your system, reputation, bank balance, and family pet.
How would you know?

The point of security is not to trust that most people will be fine.
The point of security is to be secure. You may not be able to guard
against everything, but you can certainly put some effort into not
making it easy for an attacker.

Treat the root password as a keyring with all of your keys on it, and
assume that you're going on holidays overseas. Do you contact
strangers to ask them to feed your cat? Or do you talk to a trusted
friend?

ChrisA



More information about the Python-list mailing list