In order to prevent all anonymous FTP users from listing uploaded file names, what security precaution can be taken when creating an upload directory?



A. The directory must not have the execute permission set.
B. The directory must not have the read permission set.
C. The directory must not have the read or execute permission set.
D. The directory must not have the write permission set.
E. The directory must not contain other directories.

題解

目錄的讀取權限,影響著其是否能被瀏覽其底下所儲存的文件列表。目錄的執行權限,影響著其底下的文件是否能夠被讀取(如果該文件本身的權限是設成可被讀取的話)、執行(如果該文件本身的權限是設成可被讀取與執行的話)或是寫入(如果該文件本身的權限是設成可被寫入的話)。目錄的寫入權限與執行權限,影響著是否能在其中刪除或是新建檔案。

所以選項「B」是正確答案。