httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Behlendorf <br...@organic.com>
Subject Re: Symlinks & Content negotiation...
Date Mon, 21 Aug 1995 00:30:28 GMT

Nope, this analysis is correct - changing the access.conf appropriately 
fixes this.  Is this now a security hole?  If yes, I'll add the comment 
about changing .htaccess, but leave it on known_bugs - if it's not a 
security hole I'll move it to compat_notes.  Thoughts?

	Brian

On Sun, 20 Aug 1995, Robert S. Thau wrote:
> The Apache bugs page sez:
> 
> 6.Symbolic filesystem links don't work properly with MultiViews
>     content negotiation enabled.  I.e., if you have a DocumentRoot of
>     /www/docs with /www really being a symlink to /export/www/docs,
>     content negotiation will not work.
> 
> I tried duplicating this (making a symlink to DocumentRoot, and
> changing the DocumentRoot directive in srm.conf to point to the
> symlink).  Sure enough, MultiViews doesn't work.
> 
> However, if I then adjust the corresponding <Directory> entry in
> access.conf so that it names the symlink, rather than the name of the
> physical directory, then it works again --- the problem I see is
> simply that it isn't seeing the Options directive that applies to
> DocumentRoot if you get there by a different path.
> 
> (FWIW, the test item for these was my MultiViews content-negotiated
> index.html).
> 
> Any more details?
> 
> rst
> 

--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
brian@organic.com  brian@hyperreal.com  http://www.[hyperreal,organic].com/


Mime
View raw message