>Number: 5282
>Category: config
>Synopsis: Design Bug in "Options Indexes"
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: apache
>State: open
>Class: sw-bug
>Submitter-Id: apache
>Arrival-Date: Wed Nov 10 06:40:00 PST 1999
>Last-Modified:
>Originator: [EMAIL PROTECTED]
>Organization:
apache
>Release: Apache/1.3.9 (Unix) PHP/3.0.12
>Environment:
Linux 2.2.12
>Description:
Generally Directives:
---
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
---
Users' configuration:
---
<Directory /home/*/public_html>
Options SymLinksIfOwnerMatch
</Directory>
---
I want apache not making Directory Listings generally
("Options -Indexes" - not explicitly written)!
But, I want the users to decide in their directories whether a listing is
to be done or not; by using ".htaccess"!
The Problem is:
I can do
<Directory /home/*/public_html>
AllowOverride Options
</Directory>
so the users can put the line
"Options Indexes" in their .htaccess.
But then the users also can do a "Options All"
(Includes,FollowSymLinks,ExecCGI...) - what I really don't want!!
I think it is a design bug!
There should be something like "AllowOverride GenerateIndex"!
regards
Michael
>How-To-Repeat:
>Fix:
???
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, you need]
[to include <[EMAIL PROTECTED]> in the Cc line and make sure the]
[subject line starts with the report component and number, with ]
[or without any 'Re:' prefixes (such as "general/1098:" or ]
["Re: general/1098:"). If the subject doesn't match this ]
[pattern, your message will be misfiled and ignored. The ]
["apbugs" address is not added to the Cc line of messages from ]
[the database automatically because of the potential for mail ]
[loops. If you do not include this Cc, your reply may be ig- ]
[nored unless you are responding to an explicit request from a ]
[developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]
