httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Martin Kraemer <Martin.Krae...@Fujitsu-Siemens.com>
Subject Re: [2.0] lstat's in spite of AllowOverride None
Date Wed, 07 Nov 2001 09:53:30 GMT
On Wed, Nov 07, 2001 at 09:32:37AM +0000, James A Sutherland wrote:
> 
> (lstat() on each pathname component for each request)
> 
> > Where do all the lstats() come from, and *WHY* do they happen at all?
> 
> Checking for symlinks, I think? Check for Options FollowSymLinks.

It is set for the dir in question (and everywhere above it), so it needn't
(shouldn't) do any lstat()s IMHO.

> And think 
> what would happen otherwise if I put a symlink in my personal WWW area which 
> pointed to an otherwise-prohibited file the webserver can read - like an 
> htpasswd file somewhere...

I know about that, and that the server doesn't (shouldn't) care as long
as FollowSymLinks is in effect.

   Martin
-- 
<Martin.Kraemer@Fujitsu-Siemens.com>         |     Fujitsu Siemens
Fon: +49-89-636-46021, FAX: +49-89-636-47655 | 81730  Munich,  Germany

Mime
View raw message