On 05/15/2015 10:17 AM, Mathieu Bridon wrote:
On Fri, 2015-05-15 at 09:13 -0500, Dennis Gilmore wrote:
On Friday, May 15, 2015 03:14:59 PM Mathieu Bridon wrote:
On Wed, 2015-05-13 at 12:11 -0500, Pat Riehecky wrote:
Could we use +SymLinksIfOwnerMatch instead of +FollowSymLinks ?

Not sure.

Here, /mnt/koji belongs to root:root, so SymLinksIfOwnerMatch would not
allow clients to follow the "toplink" link.

How is it in other deployments? Do people usually give /mnt/koji itself
to apache:apache? (or whatever the user under which Koji runs)
most if not all of /mnt/koji needs to be owned by apache for koji to work.
koji does assume that it owns all of /mnt/koji

Here, stuff in /mnt/koji is owned by apache:apache, but /mnt/koji itself
is owned by root:root.

But I'm happy to just change the ownership, and then resend a patch that
does what Pat was suggesting. :)

FollowSymLinks is the default in apache 2.4, so unnecessary there.
https://httpd.apache.org/docs/current/mod/core.html#options

For the folks still on 2.2 (which is probably a lot given that rhel6 has 2.2), I think setting either should be fine.

This is just the default config, so users can adjust it as needed.


--
buildsys mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/buildsys

Reply via email to