Re: [e-smith-devinfo] Drafting Securing Web-Apps Howto....Questions?

2002-04-18 Thread Brandon Friedman
Darrell May wrote: # Administration: phpmyadmin Alias /phpmyadmin /opt/administration/phpmyadmin Directory /opt/administration/phpmyadmin RequireSSL on So you will only be able to assecc this using SSL? How do you allow dual access? Like with webmail! Options -Indexes What

Re: [e-smith-devinfo] Drafting Securing Web-Apps Howto....Questions?

2002-04-18 Thread Brandon Friedman
Dan Brown wrote: 3. Directory ownership - Who should be the owner of this directory? www or root:shared? Why? The question also applies to files contained in the directory. I'm really not sure. I'm still inclined to say www:www, but Darrell has pointed out that this would allow

[e-smith-devinfo] AIDE - Advanced Instusion Detection Environment

2002-04-18 Thread Ari Novikoff
I was just poking around and taking a look at AIDE http://www.cs.tut.fi/~rammer/aide.html Has anyone compiled the source successfully under SME 5.1.2? I know it can be done under redhat, but there seems to be a number of challenges under SME - at least for me... Would someone else be willing

Re: [e-smith-devinfo] AIDE - Advanced Instusion Detection Environment

2002-04-18 Thread Charlie Brady
On Thu, 18 Apr 2002, Ari Novikoff wrote: I was just poking around and taking a look at AIDE http://www.cs.tut.fi/~rammer/aide.html Has anyone compiled the source successfully under SME 5.1.2? I know it can be done under redhat, but there seems to be a number of challenges under SME -

Re: [e-smith-devinfo] AIDE - Advanced Instusion Detection Environment

2002-04-18 Thread Ari Novikoff
!-- snip -- Unless you really need the bleeding edge version, the precompiled binaries from RedHat Powertools 7.1 are sure to be compatible. Find them here: http://rpmfind.net/linux/rpm2html/search.php?query=aide !-- snip -- I do appreciate this link, Charlie. I'd like to point out a

Re: [e-smith-devinfo] Developer interested in Rolodap?

2002-04-18 Thread John Lederer
Is e-smith's ldap a necessary part of e-smith? Are they using it for authorization or for mail delivery? If it is just an internal employee address book, rolodap could take that function over. John John Powell wrote: On Wed, 17 Apr 2002, John Lederer wrote: OpenLDAp can run multiple

Re: [e-smith-devinfo] Developer interested in Rolodap?

2002-04-18 Thread John Powell
SME's LDAP can be disabled if you don't care about it, it performs no other function than providing addresses for email clients. The main thing you would lose by disabling it and replacing it with Rolodap is the auto-insertion into the LDAP db of new users (and the reverse, removal of