Upload failed - Security risk??

jim.thornton

Verified User
Joined
Jan 1, 2008
Messages
334
I just tried uploading a file through my file manager in DA. It failed with a message to ensure that /home/tmp is created and chmod'd to 1777.

I found a post to add

modify tmpdir=/tmp

to my directadmin.conf file and restart.

I did that but I still got the error.

I then created /home/tmp and chmod'd it to 1777

It worked find, upload successful.

However.... Is this a security risk? When hardening my server, I read many things that said /tmp should not be executable. Having it set to 1777, isn't that a risk?
 
Maybe try dropping the exec bits and see if it still works as expected?

I can't see why exec bit is required here.
 
I always create a virtual /tmp which is chmodded to 1777 and /home/tmp symlinks to it so no /home/tmp creation is needed.
 
Back
Top