Bugtraq: Re: Curious fileutils/coreutils behaviour.

[Martin <broadcast () mail ptraced net>]

SymLinksIfOwnerMatch
   The server will only follow symbolic links for which the target file
   or directory is owned by the same user id as the link.
   *Note*: this option gets ignored if set inside a <Location> section.

    From http://httpd.apache.org/docs/mod/core.html#options


Luciano Miguel Ferreira Rocha wrote:

> On Fri, May 14, 2004 at 07:49:07PM +0100, David Malone wrote:
>  
>
> > > (*)Contrary to the FAQ entry you cited, it is sometimes useful to change the
> > > ownership of a symlink.  Since the owner of a symlink can be detected by a
> > > program, there can exist programs which depend on it.
> > >      
> > Yes, indeed. As another example, Apache has an option to only follow
> > symlinks if they belong to the right person.
> >    
> If the target belongs to the right person, not the symlink itself.
>
> Regards,
> Luciano Rocha
>
>