Changeset 26541 for main

Timestamp:

2012-11-29T14:11:56+13:00 (11 years ago)

Author:

ak19

Message:

Kathy said that the apache server really only needs to give access to the collect and web folders (and cgi-bin for remote scripts), and that the rest of GS2 can just be inaccessible. This will deny access to the user databases too and the apache logs. Still need to test as a remote GS against a client-GLI, then will commit the windows version.

File:

• main/trunk/greenstone2/runtime-src/packages/apache-httpd/httpd.conf.in (modified) (1 diff)

main/trunk/greenstone2/runtime-src/packages/apache-httpd/httpd.conf.in

@@ -436 +436 @@
   </Directory>  
   
-  Alias /greenstone "**GSDLHOME**"
-  <Directory "**GSDLHOME**">
-     Options Indexes MultiViews FollowSymLinks
-     AllowOverride None
-     Order deny,allow
-     **CONNECTPERMISSION** from all
-     Allow from 127.0.0.1 **HOST_IP** **HOSTS** localhost
+  # Deny access to all except collect and web folder
+  <Directory />
+    Order Deny,Allow
+    Deny from all
   </Directory>
 
-# Deny access to users.gdb (and other gdb files)
-# Tested with remote GS2 server on Windows against linux client
-# If any issues, can try appending the line: 
-#   Allow from 127.0.0.1 **HOST_IP** **HOSTS** localhost
-  <FilesMatch "\.gdb">
-     Order deny,allow
-     Deny from all
-  </FilesMatch>
+  Alias /greenstone/web "**GSDLHOME**/web"
+  <Directory "**GSDLHOME**/web">
+    Order Deny,Allow
+    **CONNECTPERMISSION** from all
+    Allow from 127.0.0.1 **HOST_IP** **HOSTS** localhost
+  </Directory>