/usr/share/doc/bugzilla3/examples/vh-*.conf files faulty
Bug #386608 reported by
Rolf Leggewie
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
bugzilla (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: bugzilla
The examples provided in /usr/share/
To post a comment you must log in.
The examples should also do a better job of protecting sensitive directories. Here are my suggestions
DocumentRoot /usr/share/ bugzilla3/ web cgi-bin/ bugzilla3 bugzilla3/ data
Alias /cgi-bin /usr/lib/
Alias /data /var/lib/
RewriteEngine On apache2/ rewrite. log"
RewriteRule ^/(.*\.cgi.*) /cgi-bin/$1 [PT]
RewriteRule ^/index.html$ /cgi-bin/index.cgi [PT]
RewriteLog "/var/log/
RewriteLogLevel 2
<Directory "/usr/lib/ cgi-bin/ bugzilla3" >
AllowOverri de None rMatch
AddHandler cgi-script .cgi
Options +ExecCGI -MultiViews +SymLinksIfOwne
Order allow,deny
Allow from all
</Directory>
<Directory "/var/lib/ bugzilla3/ data">
deny from all
</Directory>
<Directory "/usr/share/ bugzilla3/ web/shadow" >
deny from all
</Directory>
<FilesMatch ^(.*\.pm| .*\.pl| .*localconfig. *)$>
deny from all
</FilesMatch>