mirror of
https://github.com/iiab/iiab.git
synced 2025-02-12 11:12:06 +00:00
48 lines
1.7 KiB
Text
48 lines
1.7 KiB
Text
# This provides worldwide access to everything below the directory
|
|
# Security concerns:
|
|
# * Raw log processing data is accessible too for everyone
|
|
# * The directory is by default writable by the httpd daemon, so if
|
|
# any PHP, CGI or other script can be tricked into copying or
|
|
# symlinking stuff here, you have a looking glass into your server,
|
|
# and if stuff can be uploaded to here, you have a public warez site!
|
|
ScriptAlias /awstats /usr/lib/cgi-bin
|
|
<Directory /usr/share/awstats>
|
|
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
|
|
AllowOverride None
|
|
DirectoryIndex /cgi-bin/awstats.pl
|
|
require all granted
|
|
</Directory>
|
|
|
|
# This provides worldwide access to everything below the directory
|
|
# Security concerns: none known
|
|
<Directory /usr/share/awstats/icon>
|
|
Options None
|
|
AllowOverride None
|
|
require all granted
|
|
</Directory>
|
|
|
|
# This provides worldwide access to everything below the directory
|
|
# Security concerns: none known
|
|
<Directory /usr/share/java/awstats>
|
|
Options FollowSymLinks
|
|
AllowOverride None
|
|
require all granted
|
|
</Directory>
|
|
|
|
# This provides worldwide access to everything in the directory
|
|
# Security concerns: none known
|
|
Alias /awstats-icon/ /usr/share/awstats/icon/
|
|
Alias /awstatsicons/ /usr/share/awstats/icon/
|
|
|
|
# This provides worldwide access to everything in the directory
|
|
# Security concerns: none known
|
|
Alias /awstatsclasses/ /usr/share/java/awstats/
|
|
|
|
# This (hopefully) enables _all_ CGI scripts in the default directory
|
|
# Security concerns: Are you sure _all_ CGI scripts are safe?
|
|
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
|
|
<Directory /usr/lib/cgi-bin>
|
|
Options +ExecCGI
|
|
SetHandler cgi-script
|
|
require all granted
|
|
</Directory>
|