www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dean Gaudet <dgau...@arctic.org>
Subject Re: documentation/920: Advise an htaccess file in /...
Date Sat, 26 Jul 1997 20:48:39 GMT

On Fri, 25 Jul 1997, Jason Riedy wrote:

> As http://www.apache.org/docs/mod/core.html#options states that with
> FollowSymLinks, the directory isn't re-written and compared.  Thus,
> if a user does something like `ln -s / root' in the right place,
> folks can walk the directory tree.  

That's what SymLinksIfOwnerMatch is intended to deal with.

>   And some folks here already cross-link in the 
> file system, so I can't use SymLinksIfOwnerMatch.

Why can't the symlink just be changed to be the same uid as the destination
of the link?  I use this all the time in my test setups.


View raw message