[EMAIL PROTECTED] security bug in Apache regarding SSI and symbolic links?

2008-11-14 Thread Paul B. Henson
resolved. For now, I'm tentatively considering simply bypassing the cache check, which results in correct behavior and I don't think would be particularly costly in terms of resources. Thanks... -- Paul B. Henson | (909) 979-6361 | http://www.csupomona.edu/~henson/ Operating S

Re: [EMAIL PROTECTED] SSI/server-side includes and symbolic links/SymlinkIfOwnerMatch

2008-10-04 Thread Paul B. Henson
ludesNoExec [...] [...] SetHandler server-status Order deny,allow Deny from all Allow from 127.0.0.1 [...] Options Indexes MultiViews AllowOverride None Order allow,deny Allow from all -- Paul B. Henson | (909) 979-6361 | http://www.csupomona.edu/~henson

Re: [EMAIL PROTECTED] SSI/server-side includes and symbolic links/SymlinkIfOwnerMatch

2008-10-04 Thread Paul B. Henson
symbolic link following configuration, or if it is a bug? (Or if I'm just doing something stupid, which is always a possibility)... Thanks... -- Paul B. Henson | (909) 979-6361 | http://www.csupomona.edu/~henson/ Operating Systems and Network Analyst | [EMAIL PROTECTED] California

Re: [EMAIL PROTECTED] SSI/server-side includes and symbolic links/SymlinkIfOwnerMatch

2008-10-03 Thread Paul B. Henson
and my problem/question. I don't want the symlink followed. The problem is that SSI successfully follows the symlink when I think it shouldn't. > On Sat, Oct 4, 2008 at 2:52 AM, Paul B. Henson <[EMAIL PROTECTED]> wrote: > > > > I'm running Apa

[EMAIL PROTECTED] SSI/server-side includes and symbolic links/SymlinkIfOwnerMatch

2008-10-03 Thread Paul B. Henson
evant)? Thanks much for any help... -- Paul B. Henson | (909) 979-6361 | http://www.csupomona.edu/~henson/ Operating Systems and Network Analyst | [EMAIL PROTECTED] California State Polytechnic University | Pomona CA 91768 ---