httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Behlendorf <br...@hyperreal.com>
Subject Re: WWW Form Bug Report: "FollowSymLinksIfOwnerMatch and automounting don't mix well" on Solaris 2.x (fwd)
Date Mon, 25 Nov 1996 03:14:49 GMT

---------- Forwarded message ----------
Date: Sun, 24 Nov 1996 15:13:19 -0600
From: "David R. Linn" <drl@vuse.vanderbilt.edu>
To: fielding@liege.ICS.UCI.EDU
Cc: new-httpd@hyperreal.com
Subject: Re: WWW Form Bug Report: "FollowSymLinksIfOwnerMatch and automounting don't mix well"
on Solaris 2.x

>> <Directory />
>> AllowOverride None
>> Options FollowSymLinks
>> order deny,allow
>> deny from all
>> </Directory>
>> 
>> which is what everyone should have in their access.conf, in my opinion.

We explicitly disable FollowSymLinks in favor of FollowSymLinksIfOwnerMatch
because we found someone (a legitimate user) publishing our passwd file.



Mime
View raw message