You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Nick De Decker <ni...@i-vision.be> on 2002/04/29 13:05:38 UTC
frontpage extensions and allowoverride all
Hello,
I`ve succesfuly installed the ms frontpage 2002 extensions, but i
needed to set allowoverride to all (or at least limit, authconfig and
options). However i don't want my users to override my options settings.
They could easily expose my server`s root dir / by symlinking it.
Any solutions ?
Regards,
Nick
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: frontpage extensions and allowoverride all
Posted by Frank Reichenbacher <fr...@mollynet.com>.
If your users want FP extensions, then you should disable telnet. They
should be up/downloading everything with the FP client except cgi for which
they need to use ftp (ASCII transfer). You can't do a symlink with ftp can
you?
Frank
----- Original Message -----
From: "Nick De Decker" <ni...@i-vision.be>
To: <us...@httpd.apache.org>
Sent: Monday, April 29, 2002 4:05 AM
Subject: frontpage extensions and allowoverride all
> Hello,
>
> I`ve succesfuly installed the ms frontpage 2002 extensions, but i
> needed to set allowoverride to all (or at least limit, authconfig and
> options). However i don't want my users to override my options settings.
> They could easily expose my server`s root dir / by symlinking it.
> Any solutions ?
>
> Regards,
> Nick
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org