Return-Path: Delivered-To: new-httpd-archive@hyperreal.org Received: (qmail 15907 invoked by uid 6000); 25 Feb 1998 21:44:14 -0000 Received: (qmail 15893 invoked from network); 25 Feb 1998 21:44:12 -0000 Received: from valis.worldgate.com (marcs@198.161.84.2) by taz.hyperreal.org with SMTP; 25 Feb 1998 21:44:12 -0000 Received: from localhost (marcs@localhost) by valis.worldgate.com (8.8.7/8.8.7) with SMTP id OAA12436 for ; Wed, 25 Feb 1998 14:44:05 -0700 (MST) Date: Wed, 25 Feb 1998 14:44:05 -0700 (MST) From: Marc Slemko To: new-httpd@apache.org Subject: Re: without Options +ExecCGI? In-Reply-To: <19980225205052.11112@deejai.mch.sni.de> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: new-httpd-owner@apache.org Precedence: bulk Reply-To: new-httpd@apache.org On Wed, 25 Feb 1998, Martin Kraemer wrote: > On my linux box at home, I can execute commands without an explicit > Options +ExecCGI anywhere around. Is that intentional? > I thought it should be forbidden... The way it is currently is correct, because exec cmd has nothing to do with CGIs. The only bogon I am aware of in that area is that IncludesNOEXEC does not currently allow AddHandler'd CGIs to be run by include virtual but only allows ScriptAliased ones. IncludesNOEXEC should still allow include virtual to include things that would be run as CGIs if accessed directly anyway. > The only Options configured are > Options Indexes FollowSymLinks > > Martin > -- > | S I E M E N S | | Siemens Nixdorf > | ------------- | Voice: +49-89-636-46021 | Informationssysteme AG > | N I X D O R F | FAX: +49-89-636-44994 | 81730 Munich, Germany > ~~~~~~~~~~~~~~~~My opinions only, of course; pgp key available on request >