-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[EMAIL PROTECTED] wrote on Mon, Dec 09, 2002 at 05:01:12PM -0500 :
> On Mon, 9 Dec 2002, Brent Hasty wrote:
>
> > I have been attempting to install www.sql-ledger.com SQL-Ledger 2.0 on my
> > system running mdk 9.0, however apache is giving me an error 403 when I
> > attempt to acess its web pages located in /usr/local/sql-ledger
> > I followed the instructions and edited httpd.conf ect....
Paste the sections you edited/added.
> 403 is a permissions error. Which user can read the contents of the
Yes. I'd be willing to bet you need to add the following to
commonhttpd.conf:
<Directory /usr/local/sql-ledger>
AllowOverride All
Options -MultiViews -Indexes -FollowSymLinks
Order allow,deny
Allow from all
</Directory>
The way apache starts is it:
Blocks all access to the physical file system /
Opens access to the physical file system /var/www/html
Opens access to the physical file system /var/www/perl
Opens access to the physical file system /var/www/cgi-bin
Opens access to the physical file system /var/www/protected-cgi-bin
Opens access to the physical file system /home/*/public_html
Opens access to the physical file system /home/*/public_html/cgi-bin
Opens access to the physical file system /var/www/icons
Opens access to the physical file system /usr/share/doc
Since you're trying to access files outside of those allowed paths, you
have to specifically allow it. It's done this way because of some past
exploits with the pathnames. Rather than trust that there will never be
another bug within apache that will let you get somewhere you don't
want, you set it up securely out of the box so that apache won't let
itself go somewhere that you don't want it to.
Blue skies... Todd
- --
Todd Lyons -- MandrakeSoft, Inc. http://www.mandrakesoft.com/
UNIX was not designed to stop you from doing stupid things, because
that would also stop you from doing clever things. -- Doug Gwyn
Cooker Version mandrake-release-9.1-0.1mdk Kernel 2.4.20-1mdk
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE99UL+lp7v05cW2woRAlAnAKCGACgV9NfH7/maEpiH5PLq5X/0PgCgqNqW
m108C4dNYpzvo8QMRI1AIbY=
=7LXQ
-----END PGP SIGNATURE-----
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
