https://bz.apache.org/bugzilla/show_bug.cgi?id=70014
Bug ID: 70014
Summary: Option FollowSymLinks underspecified, impacts
RewriteRule in per-directory context (.htaccess)
Product: Apache httpd-2
Version: 2.5-HEAD
Hardware: All
URL: https://httpd.apache.org/docs/current/mod/core.html#op
tions
OS: All
Status: NEW
Severity: trivial
Priority: P4
Component: Documentation
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
The Options directive's documentation reads:
> FollowSymLinks
> The server will follow symbolic links in this directory. This is the default
> setting.
> Even though the server follows the symlink it does not change the pathname
> used to match against <Directory> sections.
> The FollowSymLinks and SymLinksIfOwnerMatch Options work only in
> <Directory> sections or .htaccess files.
> Omitting this option should not be considered a security restriction,
> since symlink testing is subject to race conditions that make it
> circumventable.
This is not incorrect, but does not fully specify the option's effect. It is
notably not indicated what happens when the option is disabled.
One effect of disabling is to prevent per-directory URL rewriting. As indicated
in ticket #62485, this seems like a bug for Directory sections, but this effect
should probably be documented anyway for the time being, since it is likely to
persist for .htaccess files.
Note that I find it redundant to specify "in this directory", since this is
indicated at the top.
🅭🄍: https://www.philippecloutier.com/Common+infrastructure+licensing#its
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
