block HTTP access to log and rra directories (BZ #609856)

This commit is contained in:
Ken Dreyer 2011-10-27 16:44:43 -06:00
parent 8647659f14
commit 236450cab3
2 changed files with 23 additions and 3 deletions

View File

@ -1,6 +1,10 @@
# #
# Cacti: An rrd based graphing tool # Cacti: An rrd based graphing tool
# #
# Change "Allow from 127.0.0.1" to open up cacti to other network devices.
# For example, change "Allow from 127.0.0.1" to "Allow from all".
Alias /cacti /usr/share/cacti Alias /cacti /usr/share/cacti
<Directory /usr/share/cacti/> <Directory /usr/share/cacti/>
@ -9,3 +13,15 @@ Alias /cacti /usr/share/cacti
Allow from 127.0.0.1 Allow from 127.0.0.1
</Directory> </Directory>
# The sections marked "deny from all" should not be modified.
# These are in place in order to harden cacti.
<Directory /usr/share/cacti/log>
order deny,allow
Deny from all
</Directory>
<Directory /usr/share/cacti/rra>
order deny,allow
Deny from all
</Directory>

View File

@ -1,6 +1,10 @@
In order for Cacti to function properly please properly edit /etc/cacti/db.php In order for Cacti to function properly, please edit the following:
and enable the crontab script in /etc/cron.d/cacti For more information about
setting up the database please read: /etc/cacti/db.php
/etc/cron.d/cacti
/etc/http/conf.d/cacti.conf
For more information about setting up the database please read:
docs/INSTALL docs/INSTALL