[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]
Re: Fwd: Apache problem
- From: tom farrell <thf pvs k12 nm us>
- To: redhat-install-list redhat com
- Subject: Re: Fwd: Apache problem
- Date: Mon, 31 May 1999 00:48:52 +0000
Hi...
> I want to be able to see a users directory if there
> is no index.html or index.htm in the directory.
Indexing is turned off by default, since allowing others to see the raw
filelist of a directory may be a very bad idea.
You could achieve your goal using Access Control Lists as setup by the
.htaccess file (or files) you create. See the documentation at:
http://www.apache.org/docs/mod/core.html
and search for .acl, AccessFileName, .htaccess and so on. This will let
you have a very fine level of control.
Easier: if you add a section like this:
<directory /home/webusers/*>
Options Indexes
</directory>
to the end of /etc/httpd/conf/access.conf (or wherever your access.conf
file is), then you'll be allowing the option of indexing any directory
in he /home/webusers/ path - only if that directory has a public_html
directory that the server will allow at all, that is.
Warnings:
* Am I an expert at this... no.
* If the Document root directory (set in srm.conf) overlaps/includes or
otherwise is connected with the /home/webusers/ path, you could be
setting up a security problem or unintentionally allowing access to
things that should remain private.
* You must also have the permissions on directories setup correctly -
they need, for example, to be "x" (executable) for all (not just
owner/group) in order to be listable, and they need to be "r" (readable)
for all for the same reason.
tom
--
tom farrell <thf pvs k12 nm us>
pojoaque valley schools
santa fe nm 87501
"Beauty is in the i of the Beholder"
(Julia Mandelbrot)
[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]