Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of trawick@gmail.com designates
 209.85.160.173 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=PQOAZNbXz8GsqJW8xDNfRutxPetfyD/FT5Pla4+hivDXTc6qS3OjsGC4dbnLeySEk1
         /x2mV6MYfV7kUV/mF+USrIzu5ZQoB+UxATILFvOfAwZzcnJZZtCaCan0VO+y0TsLpGFA
         58248IvsuUyRLBb3XnxGtKiD6Pz+ZrU8r/B+0=
MIME-Version: 1.0
In-Reply-To: <4C233C16.9080801@schwicking.de>
References: <EDAE0D0A-2E9A-4C55-82D6-2C69FB12E400@jaguNET.com>
	<4C20642D.5040207@schwicking.de>
	<CE37A10C-F2A6-4C1F-B300-E482EB484E53@webthing.com>
	<4C233C16.9080801@schwicking.de>
Date: Thu, 24 Jun 2010 08:32:25 -0400
Message-ID: <AANLkTin1az2VQyUVcXCRkCzGmXCJWTK4RZ16JvvEH8PR@mail.gmail.com>
Subject: Re: server-status and privacy
From: Jeff Trawick <trawick@gmail.com>
To: dev@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Thu, Jun 24, 2010 at 7:05 AM, gmx@schwicking.de <gmx@schwicking.de> wrot=
e:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Nick Kew wrote:
>> On 22 Jun 2010, at 08:20, gmx@schwicking.de wrote:
>>
>>> Just as a hint: i posted a patch about two weeks ago,
>>
>> Pointer? =A0Was that somewhere in bugzilla? =A0I don't see it on-list.
>>
> I have not opened a bug report yet. I was about to, when this thread
> started.
>
> If the outcome of this thread is, that nothing will be done, i will open
> a bug report and attach the patch.
>
> The patch is also attached to this mail for your convinience :-)

Configuring the mod_status handler name is no real solution and won't
be committed.

A general capability would need to be added to the server to handle
this situation (e.g., restrict one/all handler adjustment from
.htaccess when FileInfo can be overridden, or something else
altogether).

In the meantime, just edit your mod_status.c to change the handler
name and lock down the config and anything that can look at it
(filesystem access/mod_perl/mod_info/???).