Re: FYI: Apache httpd NoFollowSymLink follows symlinks feature

0
56

Posted by halfdog on Jun 24

Christian Sciberras wrote:

No. Unless I made a mistake while testing AND misunderstood the
documentation, even with -FollowSymLinks set, apache will follow
symlinks (see POC). You might want to read the last line in section
"FollowSymlink" in

http://httpd.apache.org/docs/2.2/mod/core.html#options

I, for myself, made the same assumption about -FollowSymLink, but the
specification states, that the symlink-check is not race-free.

Source: Re: FYI: Apache httpd NoFollowSymLink follows symlinks feature