Adjust ACLs to support httpd 2.4.

This commit is contained in:
Ken Dreyer 2012-03-26 20:14:52 -06:00
parent ce61e26e6b
commit 596e3b76f5
2 changed files with 33 additions and 13 deletions

View File

@ -2,15 +2,22 @@
# Cacti: An rrd based graphing tool
#
# Change "Allow from 127.0.0.1" to open up cacti to other network devices.
# For example, change "Allow from 127.0.0.1" to "Allow from all".
# Change the following ACLs to open up Cacti to other network devices.
# For example:
# On httpd 2.4, change "Require host localhost" to "Require all granted".
# On httpd 2.2, change "Allow from localhost" to "Allow from all".
Alias /cacti /usr/share/cacti
<Directory /usr/share/cacti/>
Order Deny,Allow
Deny from all
Allow from 127.0.0.1
<IfVersion > 2.2>
Require host localhost
</IfVersion>
<IfVersion <= 2.2>
Order deny,allow
Deny from all
Allow from localhost
</IfVersion>
</Directory>
<Directory /usr/share/cacti/install>
@ -23,14 +30,24 @@ Alias /cacti /usr/share/cacti
</Directory>
# The sections marked "deny from all" should not be modified.
# These are in place in order to harden cacti.
# These sections marked "Require all denied" (or "deny from all")
# should not be modified.
# These are in place in order to harden Cacti.
<Directory /usr/share/cacti/log>
order deny,allow
Deny from all
<IfVersion > 2.2>
Require all denied
</IfVersion>
<IfVersion <= 2.2>
Order deny,allow
Deny from all
</IfVersion>
</Directory>
<Directory /usr/share/cacti/rra>
order deny,allow
Deny from all
<IfVersion > 2.2>
Require all denied
</IfVersion>
<IfVersion <= 2.2>
Order deny,allow
Deny from all
</IfVersion>
</Directory>

View File

@ -1,6 +1,6 @@
Name: cacti
Version: 0.8.7i
Release: 3%{?dist}
Release: 4%{?dist}
Summary: An rrd based graphing tool
Group: Applications/System
@ -114,6 +114,9 @@ fi
%attr(0644,root,root) %{_localstatedir}/lib/%{name}/lib
%changelog
* Mon Mar 26 2012 Ken Dreyer <ktdreyer@ktdreyer.com> - 0.8.7i-4
- Adjust ACLs to support httpd 2.4.
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.7i-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild