filepro and file permissions

[Bob Stockler]

Dan Coutu wrote (on Fri, Apr 27, 2007 at 04:53:48PM -0400):

| Bob Stockler wrote:
| > Dan Coutu wrote (on Thu, Apr 26, 2007 at 04:18:34PM -0400):
| >
| > | How can I get filePro to set different file permissions than the
| > | default? I'm running filePro on a red hat enterprise linux 4 system. It
| > | insists on creating files with permissions that allow only the filepro
| > | user to read/write the file and locks out everyone else. That's nice
| > | sometimes and right now is a total thorn in my side. I need to allow
| > | files created to be a least group read/write-able.
| >
| > That's a Linux-caused problem, not related to filePro, in its effort
| > to become more "security conscious".
| >
| > When I had a Linux system running, I used "sudo" to have designated
| > users run filePro stuff as the user "filepro" to work around it.
| >
| > I don't understand everything I know about it, so take this info with
| > a grain of salt.
| >
| > Bob
| 
| Am I right in thinking that filePro explicitly sets the uid of any child
| process it creates to be the uid of the process that invoked filePro?
| (Rather than letting the child process use the 'filepro' uid?)

ISFAIK, filePro programs are SUID (set user ID) the user "filepro"
(or whomever is the owner of the filePro binary).

A user using them on UNIX will execute them with the EUID (effective
user ID) of the user "filepro".

A user using them on later versions of Linux will execute them with
the EUID of that user.

I don't know if that "security feature" can be turned off or not, so
I used "sudo" on Linux, to have permitted users execute the filePro
programs as the user "filepro".

Bob (who doesn't know enough to be able to explain this any better)

-- 
Bob Stockler +-+ bob at trebor.iglou.com +-+ http://members.iglou.com/trebor