You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@httpd.apache.org by "Roy T. Fielding" <fi...@liege.ICS.UCI.EDU> on 1996/11/24 03:23:48 UTC

Re: WWW Form Bug Report: "FollowSymLinksIfOwnerMatch and automounting don't mix well" on Solaris 2.x

There is an easy fix for automounting:

<Directory />
AllowOverride None
Options FollowSymLinks
order deny,allow
deny from all
</Directory>

which is what everyone should have in their access.conf, in my opinion.

>>***************
>>*** 125,130 ****
>>--- 125,133 ----
>>  		    
>>      if (!(res >= 0) || !S_ISLNK(lfi.st_mode)) return OK;
>>  
>>+     /* 960830 - DRL - VUSE addition - follow any symlinks owned by root */
>>+     if (lfi.st_uid == 0) return OK;
>>+ 
>>      /* OK, it's a symlink.  May still be OK with OPT_SYM_OWNER */
>>      
>>      if (!(opts & OPT_SYM_OWNER)) return FORBIDDEN;

I would support the one-line change as well.


 ...Roy T. Fielding
    Department of Information & Computer Science    (fielding@ics.uci.edu)
    University of California, Irvine, CA 92697-3425    fax:+1(714)824-4056
    http://www.ics.uci.edu/~fielding/