[Mailman-Users] Changing the path of cgi-bin
I've been asked to change the path from ~mailman/cgi-bin to ~mailman/something-else, the claim being security (and avoiding skript kiddies).Though, with the directory aliasing, I don't see where that makes a bit of difference. In my application, the httpd.conf is embedded such that it's run only to serve Mailman (stripped down). If you have /mailman aliased to /mailman/cgi-bin, then renaming it to something else doesn't seem like it will make any difference at all. But alas, I figured I'd ask and get some opinions first. Thanks -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Changing the path of cgi-bin
Forrest Aldrich said: I've been asked to change the path from ~mailman/cgi-bin to ~mailman/something-else, the claim being security (and avoiding skript kiddies).Though, with the directory aliasing, I don't see where that makes a bit of difference. I think what they're trying to avoid are scripts that search for a cgi-bin directory. If the directory is not cgi-bin, then their scripts will fail. My mailman scripts, for instance, live in /cgi-bin/mailman. ~P -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Changing the path of cgi-bin
Right, exactly. But what' the best way to do this with Mailman. Poster wrote: Forrest Aldrich said: I've been asked to change the path from ~mailman/cgi-bin to ~mailman/something-else, the claim being security (and avoiding skript kiddies).Though, with the directory aliasing, I don't see where that makes a bit of difference. I think what they're trying to avoid are scripts that search for a cgi-bin directory. If the directory is not cgi-bin, then their scripts will fail. My mailman scripts, for instance, live in /cgi-bin/mailman. ~P -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/forrie%40forrie.com Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Changing the path of cgi-bin
On Wed, 2005-07-13 at 14:42 -0400, Forrest Aldrich wrote: Right, exactly. But what' the best way to do this with Mailman. Pick a new location of your chosing, move the cgi-bin directory to it, then edit your httpd ScriptAlias entry for mailman. -- John Dennis [EMAIL PROTECTED] -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Changing the path of cgi-bin
Are there any hard-coded dependencies upon the ~mailman/cgi-bin struct. John Dennis wrote: On Wed, 2005-07-13 at 14:42 -0400, Forrest Aldrich wrote: Right, exactly. But what' the best way to do this with Mailman. Pick a new location of your chosing, move the cgi-bin directory to it, then edit your httpd ScriptAlias entry for mailman. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
