Does EnGarde allow use of Symlinks

Discuss open-source security software and projects

Moderators: scrumpy, Dave, leihog

Does EnGarde allow use of Symlinks

Postby Light1 on Mon Apr 28, 2008 6:10 am

I’m a new Engarde user and relatively new Drupal designer with a series of Drupal multisite, e-commerce website projects in progress.

I raise the question of the use of Symlinks here because of an excellent article written by another Drupaler – Justin Hilema titled “a more secure Drupal (multsite) install”. This relates to how best to set up a secure directory structure for hosting websites on a Linux platform. i.e. Engarde.

You can read his detailed article here:

http://justinhileman.info/blog/2007/06/ ... te-install

Justin’s article on use of symlinks is well explained.

There is a further explanation of Symlinks at http://en.wikipedia.org/wiki/Symbolic_link

One security issue that I spotted is called “Symlink race”. see http://en.wikipedia.org/wiki/Symlink_race

When reviewing this, it prompted me to raise this question among our Engarde and Drupal members here in the forum.

So after having a read, any feedback, suggestions or possible work-arounds (if needed) for using Justin Hilema’s method would be greatly appreciated.
i.e is Engarde compatible for use with Justin’s method?
If not, why not?
How could a similar approach be achieved using Engarde?

Your input here could also be helpful for increasing the use of Engarde by other Drupalers so long as Engarde is compatible to this directory method.
Last edited by Light1 on Mon Apr 28, 2008 3:12 pm, edited 1 time in total.
Light1
 
Posts: 2
Joined: Sun Apr 13, 2008 12:42 am

Re: Does EnGarde allow use of Symlinks

Postby Light1 on Mon Apr 28, 2008 6:20 am

After posting, I noticed that the article link may not work, so alternatively, you can Google the title "a more secure drupal multisite install" and access the article from either the main Drupal.org site or from Justin's website. Cheers.
Light1
 
Posts: 2
Joined: Sun Apr 13, 2008 12:42 am

Re: Does EnGarde allow use of Symlinks

Postby wkeys on Thu May 01, 2008 8:23 am

hi
I see what you mean thank you for posting it.

Bests
~Bill
wkeys
 
Posts: 283
Joined: Thu Feb 01, 2007 5:43 pm


Return to Secure Open Source. Free Software.

Who is online

Users browsing this forum: No registered users and 1 guest

cron