[6781] in RedHat Linux List
Re: Apache: CGI script disable
daemon@ATHENA.MIT.EDU (Michael Ghens)
Sat Nov 30 11:22:07 1996
Date: Sat, 30 Nov 1996 08:20:18 -0800 (PST)
From: Michael Ghens <michael@spconnect.com>
To: Mick Ghazey <mghazey@miso.lowdown.com>
cc: redhat-list@redhat.com
In-Reply-To: <199611301431.JAA22010@miso.lowdown.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Things to check Options in access.conf. Take out ExecCGI. Also, I forgot
where it went, but do you have the xhackbit on?
-------------------------------------------------------------------
Michael Ghens | Area under construction
michael@spconnect.com | http://www.spconnect.com/~michael
B: (805) 563-1838 | Finger for PGP Public Key
====================SysAdmin, Small Planet Connections=============
Key fingerprint = 91 01 AF 8D F9 C9 27 9B 17 5F A0 DA C3 7C CC EE
On Sat, 30 Nov 1996, Mick Ghazey wrote:
> Date: Sat, 30 Nov 1996 09:31:28 +0000
> From: Mick Ghazey <mghazey@miso.lowdown.com>
> Reply-To: mGhazey@lowdown.com
> To: redhat-list@redhat.com
> Subject: Apache: CGI script disable
> Resent-Date: 30 Nov 1996 14:32:34 -0000
> Resent-From: redhat-list@redhat.com
> Resent-cc: recipient list not shown: ;
>
> I want to disable user's ability to execute cgi outside of the cgi
> scriptaliased directory. This should be easy. Below is an extract
> from srm.conf. Notice that "AddHandler cgi-script .cgi" is commented
> out. Doesn't seem to matter though. Programs with .cgi extensions are
> executed out of any directory.
>
> Any ideas?
>
> Mick
>
> ---------------------------------
>
>
> # If you want to use server side includes, or CGI outside
> # ScriptAliased directories, uncomment the following lines.
>
> # AddType allows you to tweak mime.types without actually editing it,
> # or to make certain files to be certain types. Format: AddType
> # type/subtype ext1
>
> # AddHandler allows you to map certain file extensions to "handlers",
> # actions unrelated to filetype. These can be either built into the
> # server or added with the Action command (see below) Format:
> # AddHandler action-name ext1
>
> # To use CGI scripts:
> # AddHandler cgi-script .cgi
>
> # To use server-parsed HTML files
> #AddType text/html .shtml
> #AddHandler server-parsed .shtml
>
> # Uncomment the following line to enable Apache's send-asis HTTP file
> # feature
> #AddHandler send-as-is asis
>
> # If you wish to use server-parsed imagemap files, use
> #AddHandler imap-file map
>
> # To enable type maps, you might want to use
> #AddHandler type-map var
>
>
> --
> PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
> ________________________________________________________________________
> http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
> http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
> ------------------------------------------------------------------------
> To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
>
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
