Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-12 Thread Neelay Shah
I think I am going to go with Bills suggestion, create a new user, have extremely restricted access for this user and run the Apache service under the context of this user... Thanks guys. Neelay --- "William A. Rowe, Jr." <[EMAIL PROTECTED]> wrote: > Neelay Shah wrote:

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Neelay Shah
o stop the web server from following ... Neelay --- "Roger B.A. Klorese " <[EMAIL PROTECTED]> wrote: > Neelay Shah wrote: > > >So, if one of the users in his home directory > creates > >a hard link to C:/ there is no way I could > configure >

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Neelay Shah
So, if one of the users in his home directory creates a hard link to C:/ there is no way I could configure the web server to avoid following that hard link..following the link would display the contents of the "C:/" Neelay --- "William A. Rowe, Jr." <[EMAIL PROTECTED]

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Neelay Shah
Got it! Thanks, Neelay --- "William A. Rowe, Jr." <[EMAIL PROTECTED]> wrote: > Neelay Shah wrote: > > Hi guys, > > > > I have two questions: > > > > 1. Is there any way I can specify in the config. > file > > for Apache that do

[EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Neelay Shah
Hi guys, I have two questions: 1. Is there any way I can specify in the config. file for Apache that do not allow access to any directory called 'foo' in my complete root...i.e. for e.g. if I say Order Deny,Allow Deny from All This will disable access to 'c:\MyRoot\Dir1\foo' but if I h