Red Hat Server Tux 2.1 Manuel d'utilisateur télécharger pdf (Page 23)

Chapter 4. Security

TUX is designed to have very strict security. This is possible because the assistant user-space

daemons is used to handle the complex exceptions.

TUX only serves a ﬁle if

1. The URL does not contain ?.

2. The URL does not start with /.

3. The URL points to a ﬁle that exists.

4. The ﬁle is world-readable.

5. The ﬁle is not a directory.

6. The ﬁle is not executable.

7. The ﬁle does not have the sticky-bit set.

8. The URL does not contain any forbidden substrings such as ..

1. Conﬁgurable through the sysctl parameters in /proc/sys/net/tux

1 2 ... 18 19 20 21 22 23 24 25 26 27 28

Pas de commentaire

Red Hat Server Tux 2.1 Manuel d'utilisateur Page 23