On Mon, Dec 14, 2009 at 2:42 AM, amvtek <[email protected]> wrote:

>  Main risk we are trying
> to mitigate, is the one of an 'exploit' on application, at the end of
> which the attacker will have gained the privileges of application
> effective user. If 'private file' is directly owned by this user, the
> attacker would be in position to read it.


Hi Amvtek,

The problem you are trying to solve is common in our field.  What type of
data are you trying to protect?

-JG

--

You received this message because you are subscribed to the Google Groups 
"modwsgi" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/modwsgi?hl=en.


Reply via email to