Question about rwxrwxrwx files and/or dirs Lisa's reply to Keith prompted me to wonder if I perhaps had any rwxrwxrwx files or drwxrwxrwx directories on my system that might be a security risk. So, while I don't know how to search the entire hard disk for such files, I used variants of the following syntax to search for some. $ ls -ltr */* | fgrep rwxrwxrwx srwxrwxrwx 1 joe joe 0 Aug 7 11:35 mysql.socket= Another similar found this: srwxrwxrwx 1 joe joe 0 Aug 7 11:35 tmp/akonadi-joe.nMNQOV/mysql.socket= Another similar found this: /home/joe/mydata/graphics/psp drwxrwxrwx 3 joe 4096 Dec 12 2003 Freebies Another similar found a whole lot of: lrwxrwxrwx Do any of these suggest a security risk? Is there a better way to search more comprehensively for others? What, if anything, could I or should I do to eliminate a risk? --------------------- Lisa replied to Keith, in part: > Here's more on it: > http://wordpress.org/support/topic/advanced-problem-image-upload > > http://wordpress.org/support/topic/151290 > > Solution: > > You need to use "chmod 777" for uploads to work. > > Security Issues: > > This is a security risk of course, since there are many spider scrapers > looking for an open permission directory to be able to write, say a fake > Phishing Site page for UPS with an email results script. > > Solution: (from Wordpress documentation): > > Base image directory > > The base image directory must be world writable i.e.: chmod 777 > Base image URL > --------------------------------------------------- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss