News for hackers. Stuff that matters.

A comment on Shellshock in the Wild. Parent comment

Re:Shellshock in the Wild by nknighthb on Monday September 29, 2014 @10:58AM (#8383147)
No. /etc/passwd is world-readable by necessity. /etc/shadow should only be readable by root. Your webserver should not be running as root.
[ Parent | on HN ]
Re:Shellshock in the Wild by wut42 on Monday September 29, 2014 @11:01AM (#8383161)
Oh! It makes sense. :)
[ Parent | on HN ]