dgaudet 97/06/26 19:09:17
Modified: src Tag: APACHE_1_2_X CHANGES Makefile.tmpl Log: PR#752: make clean is more aggressive Revision Changes Path No revision No revision 1.286.2.9 +15 -0 apache/src/CHANGES Index: CHANGES =================================================================== RCS file: /export/home/cvs/apache/src/CHANGES,v retrieving revision 1.286.2.8 retrieving revision 1.286.2.9 diff -C3 -r1.286.2.8 -r1.286.2.9 *** CHANGES 1997/06/27 02:01:58 1.286.2.8 --- CHANGES 1997/06/27 02:09:14 1.286.2.9 *************** *** 1,4 **** --- 1,19 ---- Changes with Apache 1.2.1 + + *) "make clean" at the top level now removes *.o. [Dean Gaudet] PR#752 + + *) Don't serve file system objects unless they are plain files, symlinks, + or directories. This prevents local users from using pipes or + named sockets to invoke programs for an extremely crude form of + CGI. [Dean Gaudet] + + *) HeaderName and ReadmeName were settable in .htaccess and could + contain "../" allowing a local user to "publish" any file on the + system. No slashes are allowed now. [Dean Gaudet] + + *) It was possible to violate the symlink Options using mod_dir (headers, + readmes, titles), mod_negotiation (type maps), or mod_cern_meta + (meta files). [Dean Gaudet] *) Update Unixware support for 2.1.2. [Lawrence Rosenman <ler@lerctr.org>] PR#511 1.46.2.1 +1 -1 apache/src/Makefile.tmpl Index: Makefile.tmpl =================================================================== RCS file: /export/home/cvs/apache/src/Makefile.tmpl,v retrieving revision 1.46 retrieving revision 1.46.2.1 diff -C3 -r1.46 -r1.46.2.1 *** Makefile.tmpl 1997/06/04 20:21:15 1.46 --- Makefile.tmpl 1997/06/27 02:09:15 1.46.2.1 *************** *** 36,42 **** $(MAKE) CC=$(CC) AUX_CFLAGS='$(CFLAGS)' RANLIB='$(RANLIB)') clean: ! rm -f httpd $(OBJS) cd regex; $(MAKE) clean cd modules; $(MAKE) clean --- 36,42 ---- $(MAKE) CC=$(CC) AUX_CFLAGS='$(CFLAGS)' RANLIB='$(RANLIB)') clean: ! rm -f httpd *.o core cd regex; $(MAKE) clean cd modules; $(MAKE) clean