Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 92485 invoked from network); 23 Apr 2009 19:24:29 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 23 Apr 2009 19:24:29 -0000 Received: (qmail 54735 invoked by uid 500); 23 Apr 2009 19:24:28 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 54680 invoked by uid 500); 23 Apr 2009 19:24:27 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 54671 invoked by uid 99); 23 Apr 2009 19:24:27 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 23 Apr 2009 19:24:27 +0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received: from [140.211.11.9] (HELO minotaur.apache.org) (140.211.11.9) by apache.org (qpsmtpd/0.29) with SMTP; Thu, 23 Apr 2009 19:24:25 +0000 Received: (qmail 92343 invoked by uid 2161); 23 Apr 2009 19:24:03 -0000 Received: from [192.168.2.4] (euler.heimnetz.de [192.168.2.4]) by cerberus.heimnetz.de (Postfix on SuSE Linux 7.0 (i386)) with ESMTP id 041F01721C for ; Thu, 23 Apr 2009 21:23:54 +0200 (CEST) Message-ID: <49F0C055.4070809@apache.org> Date: Thu, 23 Apr 2009 21:24:05 +0200 From: Ruediger Pluem User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.21) Gecko/20090402 SeaMonkey/1.1.16 MIME-Version: 1.0 To: dev@httpd.apache.org Subject: Re: Includes vs IncludesNoExec security issue - help needed References: <20090423123158.GA9012@redhat.com> In-Reply-To: <20090423123158.GA9012@redhat.com> X-Enigmail-Version: 0.95.7 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Virus-Checked: Checked by ClamAV on apache.org On 04/23/2009 02:31 PM, Joe Orton wrote: > > I've attached the patch I'm using for testing; results are up here: Is it the same one you posted on security@httpd.apache.org? Regards R�diger