Hello.

----- Mail original -----
> De: "Remi Collet" <fed...@famillecollet.com>
> À: "Liste de diffusion des developpeurs GLPI" <glpi-dev@gna.org>
> Envoyé: Vendredi 25 Septembre 2015 20:18:14
> Objet: [Glpi-dev] About bug #133
> 
> See https://github.com/glpi-project/glpi/issues/133
> 
> I definitively believe this is not a security issue in GLPI, but only a
> possible issue when the server is not correctly configured for GLPI.

I agree with that. Misconfiguration of web server also happens.

> In
> https://github.com/glpi-project/glpi/commit/b1c31d10228131fd5072ac3f598180404c2bd760
> I add a (partial) check to report this misconfiguration during the
> installation process.
> 
> Not perfect, but should work in common case.

Yes.

> Of course, this message this "very" probably raise question from
> unqualified sysadmin... :(

Sure, but i think it's better for all of us.

> This is not a blocker, installation can be forced.
> 
> 
> Remi.
> 
> 
> P.S. and RPM are not affected, and can't be,
> as by FHS, "files" is not in the webserver documents tree ;)
> 
> _______________________________________________
> Glpi-dev mailing list
> Glpi-dev@gna.org
> https://mail.gna.org/listinfo/glpi-dev

_______________________________________________
Glpi-dev mailing list
Glpi-dev@gna.org
https://mail.gna.org/listinfo/glpi-dev

Reply via email to