Re: [PATCH 49220] mod_fcgid - restrict arbitrary command execution from .htaccess files

[Jeff Trawick]

On Fri, Sep 27, 2013 at 1:56 PM, Benjamin Coddington <bcodd...@uvm.edu>wrote:

> On Sep 27, 2013, at 1:50 PM, Benjamin Coddington <bcodd...@uvm.edu> wrote:
>
> > since I'll now need to generate a large number of
> > AllowOverrideList configurations in order to implement this across our
> > hosting - which requires I walk our modules to find all the directives in
> > FileInfo and explicitly allow them to disable these mod_fcgid directives.
>
> Or... just use this:
>
> httpd -L | grep -B3 FileInfo | grep -B2 .htaccess | egrep '^\w'
>
> Ben
>

As you have a solution with httpd 2.4.x, I won't think any more about this
for fcgid 2.3.next.  (And as time goes on it is less useful to others
anyway.)