Re: [cobalt-users] Security Alert on MIPS based Cobalt Servers

[Malcolm McLeary <mmcleary@xxxxxxx>]

on 7/10/00 11:48 AM, Franklin S. Werren at webmaster@xxxxxxxxxxxx wrote:

> I like my Qube but I think Cobalt has been real sloppy
> with a proven OS like RedHat Linux.
> 
> I do not know how to fix this yet.....

My Gateway Microserver doesn't seem to suffer from this problem.  The
difference seems to be  that it has .htaccess files in directories where my
Qubes don't.  Just add a .htaccess file containing the following and the
problem will be resolved.

# Access file for /usr/admserv/html/.cobalt/groupList/ (admin)
order allow,deny
allow from all
require user admin
Authname Server
Authtype Basic
AuthUserFile /etc/htpasswd
AuthGroupFile /etc/htgroup

It would be prudent to check all the other directories in
/usr/admserv/html/.cobalt/ for missing .htaccess files.  Unfortunately
creating a .htaccess at the parent level doesn't work as the error directory
shouldn't be restricted to admin only.

Cheers,  Malcolm

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

                       Information Alchemy Pty Ltd
                             ACN 089 239 305
                           Canberra, Australia

Malcolm McLeary                                Mobile:     0412 636 086
Managing Director                              Email:  mmcleary@xxxxxxx

     This message was sent using Outlook Express 5.0 for Macintosh.