Original poster can you post the end result of entire discussion.
On Fri, Jul 30, 2010 at 1:31 PM, adp002 wrote:
>
> Folks,
>
> I've been following your conversation about granting too much file access to
>hackers. I utilize Norton Internet Security Intrusion
e---
>
> From: Frank Gingras
> Date: 7/30/2010 12:09:52 PM
> To: users@httpd.apache.org
> Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have permission to
> view [this file]
>
>
> On 07/30/2010 12:01 PM, Sander Temme wrote:
> >
> > On Jul 30, 2010,
I do take frequent full system image backups, so I'm willing to take a
risk,
as I mentioned. Thanks again.
Alan
---Original Message---
From: Frank Gingras
Date: 7/30/2010 12:09:52 PM
To: users@httpd.apache.org
Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have perm
image backups, so I'm willing to take a
risk, as I mentioned. Thanks again.
Alan
---Original Message---
From: Frank Gingras
Date: 7/30/2010 12:09:52 PM
To: users@httpd.apache.org
Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have permission to
view [this file]
On
On 07/30/2010 12:01 PM, Sander Temme wrote:
On Jul 30, 2010, at 7:34 AM, Frank Gingras wrote:
May I borrow excerpts from your response for a wiki article? We answer those
questions over and over, and I would very much like to link to a complete
response instead.
I put my response on my b
On Jul 30, 2010, at 7:34 AM, Frank Gingras wrote:
> May I borrow excerpts from your response for a wiki article? We answer those
> questions over and over, and I would very much like to link to a complete
> response instead.
I put my response on my blog:
http://www.temme.net/sander/2010/07/30
is situation?
From: Eric Covener
To: users@httpd.apache.org
Sent: Thu, 29 July, 2010 10:45:53 PM
Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have permission to
view [this file]
Oh man an experienced sys admin told me to do it that way.
Please tell me what is wrong in this and wh
From: Sander Temme
To: users@httpd.apache.org
Sent: Fri, 30 July, 2010 12:43:28 PM
Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have
permission to view [this file]
James,
The Apache HTTP Server needs read access to its configuration files
and the files it serves. In and of itself, th
ks for the detailed reply.
From: Sander Temme
To: users@httpd.apache.org
Sent: Fri, 30 July, 2010 12:43:28 PM
Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have permission to
view [this file]
James,
The Apache HTTP Server needs read access to its con
ked.
> What should I do in this situation?
>
> From: Eric Covener
> To: users@httpd.apache.org
> Sent: Thu, 29 July, 2010 10:45:53 PM
> Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have permission to
> view [this file]
>
> > Oh man an experienced sys adm
On Jul 29, 2010, at 8:35 PM, James Godrej wrote:
This I understand.
But then do other users not need read write permissions.
There is hardly any thing given on this page
http://httpd.apache.org/docs/trunk/misc/security_tips.html#serverroot
You mentioned ServerRoot not be chowned to Apache.
But
?
From: Eric Covener
To: users@httpd.apache.org
Sent: Thu, 29 July, 2010 10:45:53 PM
Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have permission to
view [this file]
Oh man an experienced sys admin told me to do it that way.
Please tell me what
?
From: Eric Covener
To: users@httpd.apache.org
Sent: Thu, 29 July, 2010 10:45:53 PM
Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have permission to
view [this file]
> Oh man an experienced sys admin told me to do it that way.
> Please tell me what is wrong in this and where i
On 07/29/2010 01:15 PM, Eric Covener wrote:
Oh man an experienced sys admin told me to do it that way.
Please tell me what is wrong in this and where is this documented on Apache
docs.
I want to read.
This is a general principle -- don't grant more access than necessary.
Apache doesn't nee
> Oh man an experienced sys admin told me to do it that way.
> Please tell me what is wrong in this and where is this documented on Apache
> docs.
> I want to read.
This is a general principle -- don't grant more access than necessary.
Apache doesn't need to own files to be able to serve (read)
On Jul 29, 2010, at 1:06 PM, James Godrej wrote:
Oh man an experienced sys admin told me to do it that way.
Please tell me what is wrong in this and where is this documented on
Apache docs.
I want to read.
Oh, as for where it's documented, that would be here:
http://httpd.apache.org/docs
Because the apache server runs as a user called, say, 'www', any files
which are owned by the user 'www' will be writable by any rogue php
script, cgi file, whatever.
Since there is a HUGE amount of bad code out there, imagine if you
download and install a product, and a bug is discovered i
From: Frank Gingras
To: users@httpd.apache.org
Sent: Thu, 29 July, 2010 7:16:13 PM
Subject: Re: [us...@httpd] Apache 2.2.15 says You do not have permission to
view
[this file]
On 07/29/2010 01:06 AM, James Godrej wrote:
> You need to have the owner
*Subject:* [us...@httpd] Apache 2.2.15 says You do not have permission
to view [this file]
I installed Apache server 2.2.15 and initially the server worked fine. Then
I installed Php 5.2.13. Initially the server worked with a test file. I
installed MySql 5 and Task Manager on Vista Ultimate said that
You need to have the owner of your Document Root as your apache or www-data
user
not root.
From: adp002
To: Apache Users Group
Sent: Thu, 29 July, 2010 3:55:34 AM
Subject: [us...@httpd] Apache 2.2.15 says You do not have permission to view
[this file]
I
I installed Apache server 2.2.15 and initially the server worked fine. Then
I installed Php 5.2.13. Initially the server worked with a test file. I
installed MySql 5 and Task Manager on Vista Ultimate said that mysql was
running. However, when I now entered http://localhost:8080/test.php, I
rec
21 matches
Mail list logo
