envvars: Fix insecure handling of LD_LIBRARY_PATH that could lead to the
current working directory to be searched for DSOs. [Stefan Fritsch]
+ *) core: Add filesystem paths to access denied / access failed messages
+ AH00035 and AH00036. [Eric Covener]
+
*) mod_dumpio: Properly handle errors from subsequent input filters.
PR 52914. [Stefan Fritsch]
[ start all new proposals below, under PATCHES PROPOSED. ]
- * core: add r->filename to some errorlog access failed / access denied msgs
- Trunk patch: http://svn.apache.org/viewvc?rev=1301504&view=rev
- 2.4.x patch: trunk works
- +1: covener, jorton, trawick
PATCHES PROPOSED TO BACKPORT FROM TRUNK:
[ New proposals should be added at the end of the list ]
}
else if (APR_STATUS_IS_EACCES(rv)) {
ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00035)
- "access to %s denied because search "
- "permissions are missing on a component "
- "of the path", r->uri);
+ "access to %s denied (filesystem path '%s') "
+ "because search permissions are missing on a "
+ "component of the path", r->uri, r->filename);
return r->status = HTTP_FORBIDDEN;
}
else if ((rv != APR_SUCCESS && rv != APR_INCOMPLETE)
* rather than assume not found.
*/
ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00036)
- "access to %s failed", r->uri);
+ "access to %s failed (filesystem path '%s')",
+ r->uri, r->filename);
return r->status = HTTP_FORBIDDEN;
}