webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 11:43:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

captive-portal: Move CGI files to CGI directory

Browse Source 
Previously the assets directory has ExecCGI privileges
which is not at all required and potentially dangerous.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2017-04-21 16:46:49 +01:00
parent d57e8c67bc
commit 0a02d9bb0c
4 changed files with 8 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
config/httpd/vhosts.d/captive.conf
View File

@@ -3,12 +3,6 @@ Listen 1013
<VirtualHost *:1013>
DocumentRoot /srv/web/ipfire/html/captive
<Directory /srv/web/ipfire/html/captive>
Options ExecCGI
Order allow,deny
Allow from all
</Directory>
ScriptAlias /cgi-bin/ /srv/web/ipfire/cgi-bin/captive/
Alias /assets/ /srv/web/ipfire/html/captive/assets/
@@ -16,11 +10,16 @@ Listen 1013
# All unknown URIs will be redirected to the first
# redirector script.
ScriptAliasMatch .* /srv/web/ipfire/html/captive/index.cgi
ScriptAliasMatch .* /srv/web/ipfire/cgi-bin/captive/redirect.cgi
<Directory /srv/web/ipfire/cgi-bin/captive>
Options ExecCGI
Order allow,deny
Allow from all
</Directory>
<Directory /srv/web/ipfire/html/captive>
Order allow,deny
Allow from all
</Directory>
</VirtualHost>