Bug 352711
| Summary: | missing /etc/httpd/conf.d/mediawiki.conf | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Felix Bellaby <felixbellaby> | ||||
| Component: | mediawiki | Assignee: | Axel Thimm <Axel.Thimm> | ||||
| Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | low | ||||||
| Version: | rawhide | CC: | aa_sb_0, fedora, herrold, humpf, wally | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2009-03-29 17:06:02 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Felix Bellaby
2007-10-25 16:49:13 UTC
Created attachment 237661 [details]
Example mediawiki.conf
Changing version to '9' as part of upcoming Fedora 9 GA. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping Thanks Felix for your mediawiki.conf It works great ! This is still not part of the mediawiki RPM and it should be. The attachment given here works good, except it needs an additional setting. <Location /wiki/> Allow from All </Location> Otherwise, one does not have access to it. I haven't investigated why this is, but without it in F9 it does not work. I deliberately avoided granting access to the /wiki/ location inside the proposed conf file. I do not think that an rpm package should open up access to server resources when it is installed and there is no way that we can anticipate who is supposed to be granted access. I might have done something wrong then, but without the granting to /wiki/ nobody could access the MediaWiki website. If that in itself was deliberate, it's worth mentioning it, and perhaps put in something like: <Location /wiki/> Order deny,allow Deny from all Allow from 127.0.0.1 </Location> That way they have local access, but then can open it up to all if they desire to in the future. Sorry if I've missed something and I'm just spamming this bug! I think it's a damn shame that after 18 months it's still not included in the RPM. Is there any reason why it hasn't been included yet? From Fedora 8 through to Fedora 10? Alias /wiki/index.php "/var/www/wiki/index.php" Alias /wiki/config/ "/var/www/wiki/config/" Alias /wiki/images/ "/var/www/wiki/images/" Alias /wiki/ "/usr/share/mediawiki/" This looks quite dangerous to me. The current setup never exposes /usr/share/mediawiki/ to the remote user. Now it would expose all but index.php, config and images including for example /usr/share/mediawiki/maintenance. There is no actual need for any special config in http. You just copy one or more instances, browse into their configs and then finally remove these config folders. And it's even mentioned in the package description. Also automatically exposing /config and restarting httpd even if only accessible from localhost is a security risk. Umm... how does one "browse to the configs" if not via http://hostname/<URL-of-media-wiki-here> ? And then how does one access it, if not via a mapping into the web-server's URL space via an alias? The current package in rawhide has some package specific documentation and sample configuration. Some wrong dependencies for minimal (mathless) installations have been fixed as well. From the changelog: - Add a README.RPM and a sample apache mediawiki.conf file. - All (runtime) dependencies from mediawiki need to move to mediawiki-nomath. See also http://cvs.fedoraproject.org/viewvc/rpms/mediawiki/devel/README.RPM?view=co http://cvs.fedoraproject.org/viewvc/rpms/mediawiki/devel/mediawiki.conf?view=co Please check if the issues are ironed out and reopen if not. The package in rawhide may further change before F12 to address bug #463784. |