From: Frank Lichtenheld Date: Mon, 17 Mar 2008 19:10:29 GMT Subject: Re: [RFC/PATCH 2/3] gitweb: Support caching projects list Message-ID: <20080317191029.GE18624@mail-vs.djpig.de> In-Reply-To: <200803171952.15186.jnareb@gmail.com> On Mon, Mar 17, 2008 at 07:52:13PM +0100, Jakub Narebski wrote: > Dnia poniedziałek 17. marca 2008 17:54, Frank Lichtenheld napisał: > > >At the very least you should: > [...] > >  - Check if the file is owned by the uid gitweb is running under and > >    not word-writable. > > UID ($>) or PID ($$) should be equal to cache owner: stat($file)->uid? I'm not sure what the PID has to do with anything here? But yeah, $> was what I meant. (Although I actually prefer to use POSIX::geteuid instead, since I can understand that faster). Gruesse, -- Frank Lichtenheld www: http://www.djpig.de/