[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[gopher] Another batch of Motsognir questions



Hello and happy new year to all!

I have some further questions about how (and why) Motsognir works. Even though I could send it directly to Mateusz, I'm asking here, because it may help others in the future. I hope y'all don't mind.

1. external scripts

On my gopher server I have bash, perl and PHP scripts and the do not behave the same way. I include all of them in the gophermap using "=", all of them have 755 permissions, but only PHP seems to work.

To test it I placed this in the gophermap:

=test.pl
=test.sh
=test.php

All files had just a single line of code, printing "iTest.PL", "iTest.SH" and "iTest.PHP". The resulting gophermap returned to client only the output contained only PHP output, in /var/log/messages I found

Jan 4 12:34:47 i-logout journal: motsognir [46.13.138.74][11235]: running server-side app '/var/gopher/test.php'

Nothing else. What am I missing? I can rewrite all scripts to PHP if I have to, but isn't there another way?


2. directories outside GopherRoot

When using Gophernicus, I had some directories all over the filesystem symlinked to GopherRoot and listed through gopher. Motsognir seems to prevent this because it thinks it is evasion attempt:

Jan 4 12:50:44 i-logout journal: motsognir [46.13.138.74][11396]: Requested resource: /software/ / Local resource: /var/gopher/software/ Jan 4 12:50:44 i-logout journal: motsognir [46.13.138.74][11396]: Evasion check: path '/var/gopher/software/' (/var/ftp/pub/) do not seem to belong to '/var/gopher/' Jan 4 12:50:44 i-logout journal: motsognir [46.13.138.74][11396]: Evasion attempt. Forbidden!

Is this necessary? I can't imagine how there could be symlinked folder without my knowledge, so this could be probably allowed.

Thanks for the help.

Martin


_______________________________________________
Gopher-Project mailing list
Gopher-Project@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/gopher-project




Reply to: