Re: [cobalt-users] security patch2.2

[Luc Schiltz <becher@xxxxxx>]

> Luc Schiltz wrote:
>>
>> hi,
>>
>> if you use : http://ip/siteadmin the requested url it tries to access
>> doesn't exist
>>
>> does anybody have a patch for this ? or should we do a sysreset -f , as
>> till now, we only have 3 customers running on it ?

> This http://x.com/siteadmin is a rewite rule contained in the
> main httpd.conf for the primary apache process.  This is not
> touched by the Security-2.2 update.

> The following files are updated with Security-2.2:
> siteUserMod.cgi
> siteUserList.cgi
> User.pm

> This has nothing to do with apache's rewrite rules.  If you take
> a look around line 350 in /etc/httpd/conf/httpd.conf you will
> see how the /siteadmin/ rule works.

ok, but why doesn't it work anymore ?

my httpd.conf at line 348

RewriteRule ^/siteadmin/?$              proto://servername:81/.cobalt/siteManage/%1/index.html [L,R]

do you have any patch/fix for it ?

thanks


luc

> Jeff

> --
> Jeff Lovell
> Software Engineer
> Cobalt Networks, Inc.


> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-users