ã·ã³ããªãã¯ãªã³ã¯æ»æãé²ãããã® Apache HTTPD ã¢ã¸ã¥ã¼ã«ã®è§£èª¬ã¯ãã¡ã: Apache HTTPD: mod_allowfileowner https://fumiyas.github.io/apache/mod-allowfileowner.html èæ¯ ããªãããã®å ±æ Web ãµã¼ãã¹ä¸ã®ãµã¤ãæ¹ããäºä»¶ã§ã æ»æææ³ã®ä¸ã¤ã¨ã㦠ãä»ã¦ã¼ã¶ã¼ææã®ãã¡ã¤ã«ã¸ã®ã·ã³ããªãã¯ãªã³ã¯ãèªåã®ã³ã³ãã³ããã£ã¬ã¯ããªä¸ã«ä½ããApache HTTPD çµç±ã§ã¢ã¯ã»ã¹ãããæé ãå©ç¨ããããããã åè: http://blog.tokumaru.org/2013/09/symlink-attack.html å½ç¤¾ãµã¼ãã¹ãããªãããï¼ã¬ã³ã¿ã«ãµã¼ãã¼ãã¦ã¼ã¶ã¼ãµã¤ãã¸ã®ç¬¬ä¸è ã«ãã大è¦æ¨¡æ»æã«ã¤ã㦠http://lolipop.jp/info/news/4149/#090
{{#tags}}- {{label}}
{{/tags}}