[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] remove slash



On Mon, 28 Jan 2002, Jeff Lasman wrote:

> "E.B. Dreger" wrote:
> 
> Eddy, isn't there a directive for following symlinks only if the owner
> is the same?
> 
> Wouldn't this eliminate much of the problem?

The problem tho, is it doesn't the site-admin and the user in a directory,
and any other site are in fact all owned by different users, so setting
FollowSymLinks never works anyhow, except for links within the same site,
which doesn't really help any...

As much as people gripe and groan about the machines, cobalt's default
config is at least reasonably safe, and unlikely to get most people into
trouble..

My toaster may be just an appliance, but it generally doesn't explode when
i forget to put toast in it ;)

> [...]  Of coourse I could forget.  I could
> forget a lot of security issues.  It's my job to not forget, right
> <smile>?

Ahh, yes, now there's a real issue, isn't it....
Let's see, how many times have i shot myself in the foot by doing someting
'strange' as a quick solution to some problem, only to forget about it,
and get bitten later...let me count....

still counting...

gsh