brian       96/05/27 18:45:37

  Modified:    conf      srm.conf-dist
  Log:
  Submitted by: Brian Behlendorf
  
  Changed to turn off default setting for ScriptAlias (closing a potential
  security hole)
  
  Revision  Changes    Path
  1.6       +2 -2      apache/conf/srm.conf-dist
  
  Index: srm.conf-dist
  ===================================================================
  RCS file: /export/home/cvs/apache/conf/srm.conf-dist,v
  retrieving revision 1.5
  retrieving revision 1.6
  diff -C3 -r1.5 -r1.6
  *** srm.conf-dist     1996/04/11 06:05:50     1.5
  --- srm.conf-dist     1996/05/28 01:45:34     1.6
  ***************
  *** 131,142 ****
    # Aliases: Add here as many aliases as you need (with no limit). The format 
is 
    # Alias fakename realname
    
  ! Alias /icons/ /usr/local/etc/httpd/icons/
    
    # ScriptAlias: This controls which directories contain server scripts.
    # Format: ScriptAlias fakename realname
    
  ! ScriptAlias /cgi-bin/ /usr/local/etc/httpd/cgi-bin/
    
    # If you want to use server side includes, or CGI outside
    # ScriptAliased directories, uncomment the following lines.
  --- 131,142 ----
    # Aliases: Add here as many aliases as you need (with no limit). The format 
is 
    # Alias fakename realname
    
  ! #Alias /icons/ /usr/local/etc/httpd/icons/
    
    # ScriptAlias: This controls which directories contain server scripts.
    # Format: ScriptAlias fakename realname
    
  ! #ScriptAlias /cgi-bin/ /usr/local/etc/httpd/cgi-bin/
    
    # If you want to use server side includes, or CGI outside
    # ScriptAliased directories, uncomment the following lines.
  
  
  

Reply via email to