Find the answer to your Linux question:
Results 1 to 6 of 6
I've got apache2+mysql5+php5 installed. I also installed phpbb2 and mediawiki. Is it safe to have a symlink on /var/www pointing to, for example, /usr/share/phpbb2 ? Or should I copy all ...
  1. 02-28-2007 #1
    numeritos
    numeritos is offline
    Just Joined!
    Join Date
    Feb 2007
    Posts
    4

    Apache2: security question

    I've got apache2+mysql5+php5 installed. I also installed phpbb2 and mediawiki. Is it safe to have a symlink on /var/www pointing to, for example, /usr/share/phpbb2 ?

    Or should I copy all the content to de /var/www directory?
    Reply With Quote Reply With Quote
  2. 03-02-2007 #2
    ibanex22
    ibanex22 is offline
    Linux Newbie
    Join Date
    Oct 2006
    Posts
    101
    it's safe if it is a soft link
    Code:
    ln -s
    and if there are no symbolic links in that directory tree.
    --Erik
    Reply With Quote Reply With Quote
  3. 03-02-2007 #3
    numeritos
    numeritos is offline
    Just Joined!
    Join Date
    Feb 2007
    Posts
    4
    Quote Originally Posted by ibanex22
    it's safe if it is a soft link
    Code:
    ln -s
    and if there are no symbolic links in that directory tree.
    Yeah, I had soft links in the /var/www/ directory. Anyway I deleted them and made aliases in /etc/apache2/conf.d/ directory. They told me it was more secure.

    P.S.: I didn't really understand what you meant by and if there are no symbolic links in that directory tree
    Reply With Quote Reply With Quote
  4. 03-02-2007 #4
    ibanex22
    ibanex22 is offline
    Linux Newbie
    Join Date
    Oct 2006
    Posts
    101
    say in /var/www you had a symbolic link to /usr/share/phpbb2 which contained some symbolic link to / or something... probably a rare scenario . and possibly you could .htaccess or configure that directory to not follow symbolic links.
    --Erik
    Reply With Quote Reply With Quote
  5. 03-02-2007 #5
    numeritos
    numeritos is offline
    Just Joined!
    Join Date
    Feb 2007
    Posts
    4
    Quote Originally Posted by ibanex22
    say in /var/www you had a symbolic link to /usr/share/phpbb2 which contained some symbolic link to / or something... probably a rare scenario . and possibly you could .htaccess or configure that directory to not follow symbolic links.
    Actually there are. A symlink /usr/share/phpbb2/templates/ that points to /etc/phpbb27templates/ and in that directory there's a directory called /subSilver that is a symlink pointing to /usr/share/phpbb2/templates/subSilver.
    Phpmyadmin has also symlinks pointing to /etc and so on. That was automatically made by apt so I assume it can't be that insecure...
    Reply With Quote Reply With Quote
  6. 03-02-2007 #6
    likwid
    likwid is offline
    Linux Enthusiast likwid's Avatar
    Join Date
    Dec 2006
    Location
    MA
    Posts
    649
    Using Alias is much more safe than symlink, and you need the FollowSymLinks option to actually use symlinks.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules