Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
  b=S+0VUSokJUyvDRzwXpUDqaCpTbJnLPsYQA7X5Nsx2HJKsVu103DmjlQwP27mvj1SjZetuC6EBmueNvdFmpmYtMwKM6TtPoWaUjqnPM65WlVSWCNM6buR+siiVB5Z7Hb4EHtUnROQwV9HJGPKt7SXRFCaOzg8QHb1qDOVs71HQ1s=
  ;
Message-ID: <20050812022223.57565.qmail@web52706.mail.yahoo.com>
Date: Thu, 11 Aug 2005 19:22:23 -0700 (PDT)
From: Neelay Shah <askneelay@yahoo.com>
To: users@httpd.apache.org
In-Reply-To: <42FBC760.4050407@queernet.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Subject: Re: [users@httpd] Securing Apache configuration


Well, there are some programs like "junction"
available on sysinternals that supposedly make hard
link equivalent on windows...and the point is the user
can create a hard link to c:\ in his user dir. and it
will expose the whole hard drive and that is why I am
concerned about it...how to stop the web server from
following ...

Neelay


--- "Roger B.A. Klorese " <rogerk@queernet.org> wrote:

> Neelay Shah wrote:
> 
> >So, if one of the users in his home directory
> creates
> >a hard link to C:/ there is no way I could
> configure
> >the web server to avoid following that hard
> >link..following the link would display the contents
> of
> >the "C:/"
> >  
> >
> 
> 
> Hard links don't exist in Windows, do they?
> 
> And on Linux and other Unixen they require suitable
> permissions on the 
> object.
> 
>
---------------------------------------------------------------------
> The official User-To-User support forum of the
> Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for
> more info.
> To unsubscribe, e-mail:
> users-unsubscribe@httpd.apache.org
>    "   from the digest:
> users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail:
> users-help@httpd.apache.org
> 
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org