On Fri, 2015-05-15 at 09:13 -0500, Dennis Gilmore wrote:
On Friday, May 15, 2015 03:14:59 PM Mathieu Bridon wrote:
> On Wed, 2015-05-13 at 12:11 -0500, Pat Riehecky wrote:
> > Could we use +SymLinksIfOwnerMatch instead of +FollowSymLinks ?
>
> Not sure.
>
> Here, /mnt/koji belongs to root:root, so SymLinksIfOwnerMatch would not
> allow clients to follow the "toplink" link.
>
> How is it in other deployments? Do people usually give /mnt/koji itself
> to apache:apache? (or whatever the user under which Koji runs)
most if not all of /mnt/koji needs to be owned by apache for koji to work.
koji does assume that it owns all of /mnt/koji
Here, stuff in /mnt/koji is owned by apache:apache, but /mnt/koji itself
is owned by root:root.
But I'm happy to just change the ownership, and then resend a patch that
does what Pat was suggesting. :)
--
Mathieu