On 05/15/2015 10:17 AM, Mathieu Bridon wrote:
On Fri, 2015-05-15 at 09:13 -0500, Dennis Gilmore wrote:
> On Friday, May 15, 2015 03:14:59 PM Mathieu Bridon wrote:
>> On Wed, 2015-05-13 at 12:11 -0500, Pat Riehecky wrote:
>>> Could we use +SymLinksIfOwnerMatch instead of +FollowSymLinks ?
>>
>> Not sure.
>>
>> Here, /mnt/koji belongs to root:root, so SymLinksIfOwnerMatch would not
>> allow clients to follow the "toplink" link.
>>
>> How is it in other deployments? Do people usually give /mnt/koji itself
>> to apache:apache? (or whatever the user under which Koji runs)
> most if not all of /mnt/koji needs to be owned by apache for koji to work.
> koji does assume that it owns all of /mnt/koji
Here, stuff in /mnt/koji is owned by apache:apache, but /mnt/koji itself
is owned by root:root.
But I'm happy to just change the ownership, and then resend a patch that
does what Pat was suggesting. :)
FollowSymLinks is the default in apache 2.4, so unnecessary there.
https://httpd.apache.org/docs/current/mod/core.html#options
For the folks still on 2.2 (which is probably a lot given that rhel6 has
2.2), I think setting either should be fine.
This is just the default config, so users can adjust it as needed.