Apache Userdir security

[Giovanni Baroni]

By default userdir mod in kolabserver ist activated.

So all Directories /home/*/public_html/ can be reached by any 
clientbrowser from the kolabWebServer.

Doesn't think that's a wanted feature.

You can deactivate by editing 
/kolab/etc/kolab/templates/httpd.local.template

insert at the end:

<IfModule mod_userdir.c>
    UserDir disable
</IfModule>

... and running /kolab/sbin/kolabconf

After this maybe the module is still loaded, but disabled for every 
local user.

Best Regards,
Giovanni Baroni

activmedia gmbh
im fahr 7
ch-6035 perlen
+41 78 790 0614 mobile
+41 41 450 0614 telefon
http://www.activmedia.ch