list users files with security
I want my employe to be able to list some users files/dirs (just to check sometimes if the index page is correct, if user didn't delete public_html, etc...), but don't want to give him root access
my idea is:
creating a perl script hosted on a protected (with password) directory owned by nobody with SUID... then the script would allow some commands
do you think it's safe and will work using suexec to run perl?
(this can't be done with PHP because open basedir restrictions... unless I run it as CGI)
maybe another idea, instead of "forcing" the exec of the perl script as nobody, would be to create a PHP program (that would run as nobody) that executed the perl script (so it would run as nobody)
the problem here would be the exec restrictions on PHP scripts
thanks
