httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Manoj Kasichainula <man...@io.com>
Subject Re: [PATCH] CGIs not working (PR#2354)
Date Wed, 10 Jun 1998 21:49:39 GMT
On Wed, Jun 10, 1998 at 11:01:06PM +0200, Alvaro Martinez Echevarria wrote:
> -both of the test CGIs are installed without execute permissions
>  by "make install", so if you want to use them you need to
>  manually do chmod. Shouldn't the installation do that?

Although I don't know if this was the reasoning, it is probably not a
good idea to enable any preinstalled CGI scripts by default, because
it could lead to problems like the old phf bugs if security holes are
found. If webmasters have to explicitly enable these scripts (which
are only useful for testing anyway), they are much more likely to
disable them when holes are found.

-- 
Manoj Kasichainula - manojk at io dot com - http://www.io.com/~manojk/
"Even on radio, their new logo sucks" -- Aaron Dickey concerning the BBC World
Service, 1997-11-22

Mime
View raw message