Re: apache avoid symbolic link under DocumentRoot

To: <debian-user@lists.debian.org>
Subject: Re: apache avoid symbolic link under DocumentRoot
From: "nate" <debian-user@aphroland.org>
Date: Wed, 17 Jul 2002 23:45:16 -0700 (PDT)
Message-id: <[🔎] 3502.216.39.174.24.1026974716.squirrel@webmail.linuxpowered.net>
In-reply-to: <[🔎] 20020718121704.7571.PAHUD@pahud.net>
References: <[🔎] 20020718121704.7571.PAHUD@pahud.net>

<quote who="Patrick Hsieh">
> Hello,
>
> I'd like to configure my apache server not to follow symbolic link which
> links outside the DocumentRoot, yet accept the symbolic link which is
> under DocumentRoot. Is it possible?
>

not in apache 1.3.x ..doubtful in apache 2.x too. your best bet
is to configure it to SymLinkIfOwnerMatch ..at least then a user
cannot link to /etc/passwd or most other files since they do not
own them.

nate




-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Reply to:

References:
- apache avoid symbolic link under DocumentRoot
  - From: Patrick Hsieh <pahud@pahud.net>

Prev by Date: Re: Need Reasons for switching to Debian from Redhat
Next by Date: Re: Why bother partitioning?
Previous by thread: apache avoid symbolic link under DocumentRoot
Next by thread: Re: apache avoid symbolic link under DocumentRoot
Index(es):
- Date
- Thread