summaryrefslogtreecommitdiffstats
path: root/docs
diff options
context:
space:
mode:
authormyk%mozilla.org <>2002-04-16 07:30:29 +0200
committermyk%mozilla.org <>2002-04-16 07:30:29 +0200
commit19b8a53a63d56d205f39efe20ce3ab7ba5fec0e8 (patch)
treeb088d56b242e1bf70e3d137f7249592d5926b3ab /docs
parentcf1c1f169ee55e72c782e8bffc54bbf2b55568ba (diff)
downloadbugzilla-19b8a53a63d56d205f39efe20ce3ab7ba5fec0e8.tar.gz
bugzilla-19b8a53a63d56d205f39efe20ce3ab7ba5fec0e8.tar.xz
Fix for bug 134198: Warns installations about Apache configuration issue with security ramifications.
Fix by Gregory Leblanc <gleblanc@linuxweasel.com>. Docs fix, no review needed.
Diffstat (limited to 'docs')
-rw-r--r--docs/sgml/installation.sgml5
-rw-r--r--docs/xml/installation.xml5
2 files changed, 10 insertions, 0 deletions
diff --git a/docs/sgml/installation.sgml b/docs/sgml/installation.sgml
index b50481e9f..44c2d3bba 100644
--- a/docs/sgml/installation.sgml
+++ b/docs/sgml/installation.sgml
@@ -536,11 +536,16 @@ AddHandler cgi-script .cgi
access.conf file the line:
<programlisting>
Options ExecCGI
+AllowOverride Limit
</programlisting>
is in the stanza that covers the directories into which
you intend to put the bugzilla .html and .cgi files.
</para>
<note>
+ <para>
+ AllowOverride Limit allows the use of a Deny statement in the
+ .htaccess file generated by checksetup.pl
+ </para>
<para>
Users of newer versions of Apache will generally find both
of the above lines will be in the httpd.conf file, rather
diff --git a/docs/xml/installation.xml b/docs/xml/installation.xml
index b50481e9f..44c2d3bba 100644
--- a/docs/xml/installation.xml
+++ b/docs/xml/installation.xml
@@ -536,11 +536,16 @@ AddHandler cgi-script .cgi
access.conf file the line:
<programlisting>
Options ExecCGI
+AllowOverride Limit
</programlisting>
is in the stanza that covers the directories into which
you intend to put the bugzilla .html and .cgi files.
</para>
<note>
+ <para>
+ AllowOverride Limit allows the use of a Deny statement in the
+ .htaccess file generated by checksetup.pl
+ </para>
<para>
Users of newer versions of Apache will generally find both
of the above lines will be in the httpd.conf file, rather