add notation about securing web installation

This commit is contained in:
cyeh%bluemartini.com 2001-03-09 22:37:22 +00:00
parent 2093ef5077
commit a97d3a1b10

View File

@ -275,6 +275,13 @@ If you are using a newer version of Apache, both of the above lines will be
(or will need to be) in the httpd.conf file, rather than srm.conf or
access.conf.
There are two critical directories and a file that should not be a served by
the HTTP server. These are the 'data' and 'shadow' directories and the
'localconfig' file. You should configure your HTTP server to not serve
content from these files. Failure to do so will expose critical passwords
and other data. Please see your HTTP server configuration manual on how
to do this.
2. Installing the Bugzilla Files
You should untar the Bugzilla files into a directory that you're