disabling file:///home/user viewing in apache on fc3

Ankush Grover ankush174 at gmail.com
Wed Aug 10 16:06:24 UTC 2005


On 8/10/05, Charles E. Rick Taylor, IV <tomalek at mindspring.com> wrote:
> On Wed, 2005-08-10 at 16:02 +0530, Ankush Grover wrote:
> 
> > If I do file:///home/user on the browser and then I  can see the
> > contents of that user's home directory ,even any user can see the root
> > or any other user's directory.I want to avoid this ,how can i disable
> > this on my computer. I am using FC3.
> 
> Can't reproduce here on FC3 using the latest Mozilla and Firefox
> releases.
> 
> Check the permissions on root's directory.  Also try accessing it from a
> user account via the shell.
> 
> (And what does this have to do with Apache?)
> 

If I was able to browse the directories on one PC then I would have
thought some problem on that particular PC,but same thing was
happening on another FC3 .

This is what I did on the browser.

file:///root
file:///home/myhomedirectory which is me
file:///home/user   another user directory

I tried first with root to browse the directories I was able to see
all the users directories,and then I tried the same thing  with about
5 users even normal users where able to see the directories of the
root user and even can see the contents of the file If I click on any
file.

When I change the permissions in /home/* to 770 then it stopped
showing the directories through the browser.

One of the PC is fully updated with the latest patches and other one
is newly installed.I will again install FC3 in few days time then I
will check all the settings and let you know.

Thanks & Regards

Ankush Grover

Thanks & Regards

Ankush Grover




More information about the fedora-list mailing list