How to prevent lighttpd from accessing folders other than server.document-root

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












I encountered a issue when using lighttpd1.4.36 in Linux3.10.64. I set server.document-root to /pmc/work/air, but when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air, lighttpd will access a file in the /pns/sdm_a directory. So, I would like to ask how to prevent lighttpd from accessing folders other than server.document-root



The following is the configuration information of lighttpd:



server.port = 80
$SERVER["socket"] == ":443"
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/server.pem"


server.modules = (
"mod_accesslog",
)

server.errorlog = "/var/log/lighttpd.error"
accesslog.filename = "/var/log/lighttpd.access"

server.document-root = "/pmc/work/air"
index-file.names = ("index.html")









share|improve this question









New contributor




user321866 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.



















  • '..when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air..' - Can you please clarify this statement?
    – Haxiel
    Nov 20 at 9:42














up vote
0
down vote

favorite












I encountered a issue when using lighttpd1.4.36 in Linux3.10.64. I set server.document-root to /pmc/work/air, but when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air, lighttpd will access a file in the /pns/sdm_a directory. So, I would like to ask how to prevent lighttpd from accessing folders other than server.document-root



The following is the configuration information of lighttpd:



server.port = 80
$SERVER["socket"] == ":443"
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/server.pem"


server.modules = (
"mod_accesslog",
)

server.errorlog = "/var/log/lighttpd.error"
accesslog.filename = "/var/log/lighttpd.access"

server.document-root = "/pmc/work/air"
index-file.names = ("index.html")









share|improve this question









New contributor




user321866 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.



















  • '..when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air..' - Can you please clarify this statement?
    – Haxiel
    Nov 20 at 9:42












up vote
0
down vote

favorite









up vote
0
down vote

favorite











I encountered a issue when using lighttpd1.4.36 in Linux3.10.64. I set server.document-root to /pmc/work/air, but when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air, lighttpd will access a file in the /pns/sdm_a directory. So, I would like to ask how to prevent lighttpd from accessing folders other than server.document-root



The following is the configuration information of lighttpd:



server.port = 80
$SERVER["socket"] == ":443"
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/server.pem"


server.modules = (
"mod_accesslog",
)

server.errorlog = "/var/log/lighttpd.error"
accesslog.filename = "/var/log/lighttpd.access"

server.document-root = "/pmc/work/air"
index-file.names = ("index.html")









share|improve this question









New contributor




user321866 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











I encountered a issue when using lighttpd1.4.36 in Linux3.10.64. I set server.document-root to /pmc/work/air, but when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air, lighttpd will access a file in the /pns/sdm_a directory. So, I would like to ask how to prevent lighttpd from accessing folders other than server.document-root



The following is the configuration information of lighttpd:



server.port = 80
$SERVER["socket"] == ":443"
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/server.pem"


server.modules = (
"mod_accesslog",
)

server.errorlog = "/var/log/lighttpd.error"
accesslog.filename = "/var/log/lighttpd.access"

server.document-root = "/pmc/work/air"
index-file.names = ("index.html")






lighttpd






share|improve this question









New contributor




user321866 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question









New contributor




user321866 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question








edited Nov 20 at 10:28









Rui F Ribeiro

38.2k1475125




38.2k1475125






New contributor




user321866 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked Nov 20 at 9:21









user321866

1




1




New contributor




user321866 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





user321866 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






user321866 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











  • '..when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air..' - Can you please clarify this statement?
    – Haxiel
    Nov 20 at 9:42
















  • '..when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air..' - Can you please clarify this statement?
    – Haxiel
    Nov 20 at 9:42















'..when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air..' - Can you please clarify this statement?
– Haxiel
Nov 20 at 9:42




'..when I mount /pns/sdm_a/G4125.FGP to /pmc/work/air..' - Can you please clarify this statement?
– Haxiel
Nov 20 at 9:42















active

oldest

votes











Your Answer








StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);






user321866 is a new contributor. Be nice, and check out our Code of Conduct.









 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f482918%2fhow-to-prevent-lighttpd-from-accessing-folders-other-than-server-document-root%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown






























active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes








user321866 is a new contributor. Be nice, and check out our Code of Conduct.









 

draft saved


draft discarded


















user321866 is a new contributor. Be nice, and check out our Code of Conduct.












user321866 is a new contributor. Be nice, and check out our Code of Conduct.











user321866 is a new contributor. Be nice, and check out our Code of Conduct.













 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f482918%2fhow-to-prevent-lighttpd-from-accessing-folders-other-than-server-document-root%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown






Popular posts from this blog

How to check contact read email or not when send email to Individual?

Bahrain

Postfix configuration issue with fips on centos 7; mailgun relay