> Hm. This looks wrong to me. We should only allow RewriteRules 
> in the directory context if OPT_SYM_LINKS is set since we do 
> not do any check on the result of a RewriteRule with respect 
> to symlinks. So we cannot be sure that the result of the 
> RewriteRule fulfils the conditions promised by OPT_SYM_OWNER.

That could be, I don't know the answer, but httpd currently allows
RewriteEngine on if either FollowSymlinks or SymLinksIfOwnerMatch is
enabled.  Try it in an .htaccess:

Options -FollowSymlinks +SymLinksIfOwnerMatch
RewriteEngine On

Allen

Reply via email to