httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Thomas George" <tgeo...@ibaset.com>
Subject RE: [users@httpd] Recompiling Without HTTP TRACE
Date Tue, 02 Dec 2003 00:22:33 GMT
André,

I'm not really familiar with the map_to_storage hook, or why it wouldn't
make sense to disable a potential security vulnerability if I don't need it
(please let me know your thoughts on this).

'disabling' would be not enabling a module during the ..configure process...
i.e.:

	./configure --enable-mods-shared=all --disable-info

What I need to know, is if HTTP TRACE can be disabled this way, or if I need
to try another approach.

Thanks,

Thomas

-----Original Message-----
From: André Malo [mailto:nd@perlig.de] 
Sent: Monday, December 01, 2003 12:21 PM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Recompiling Without HTTP TRACE

* "Thomas George" <tgeorge@ibaset.com> wrote:

> Thanks, but I'm already using the ModRewrite solution.
> 
> Since I am recompiling Apache anyways, I think would make sense to disable
> this <i>feature</i> at the same time.
> 
> Any suggestions would be appreciated.

It sounds quite simple to me. First you need to define, what "disabling"
means. And then modify the behaviour to the desired one. It's basically
located in the map_to_storage hook, iirc.

And no, it doesn't make sense to me as well, but you probably won't care ;-)

nd

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message