Re: [viewvc-dev] How to secure ViewVC access ?

Yves Martin wrote:
>> As for blocking the repository listing, you could just edit lib/viewvc.py,
>> and tweak the function view_roots() to throw an exception:
>>
>>    def view_roots(request):
>>   +  raise debug.ViewVCException('Access denied', '501 Not Authorized')
>>      data = common_template_data(request)
>>      request.server.header()
>>      generate_page(request, "roots", data)
> 
> I'm relunctant to change a script.
> Do you think it is enough to use a "Deny from all" for
> "/cgi-bin/viewvc.cgi" with is another block to all each root ?

That might work, but I think it would be a major headache that causes you to
change httpd.conf every time you create a new repository.

-- 
C. Michael Pilato <[email protected]>
CollabNet   <>   www.collab.net   <>   Distributed Development On Demand

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG4Uh3okEGqRcG/W4RArZUAKCtQ88wVdIzqzeM3/cls9FGnTeJdQCdHq9c
JhTZ0KNx+rgi512txFgPMfY=
=B2Ta
-----END PGP SIGNATURE-----