Hi :) Thanks for getting back! Actually my dokuwiki works great; I don't believe the change I made limits access to /usr/share/dokuwiki/lib but it does allow access to /usr/share/dokuwiki/lib/images/ via /var/www/images which would otherwise be denied because no one can access /douwiki (the URL) externally - they can only access my site which uses dokuwiki as a content management system only -- nothing is served directly using dokuwiki. The whole wiki is behind a firewall -- only cooked/preprocessed wiki content is served form the actual public website.
This approach was decided upon after years of waiting for upstream to make what they are now call 'farms' and animals -- IE, a single install but serves multiple domains. Hence the change I suggested in the wish is something I have had to change every time I updated my dokuwiki core source -- among other changes. But I don't see a reason to break Debian so I will keep making my own custom changes; so the procedure I have is: Debian settles on a Dokuwiki release - I update to that version and test it - then make my changes & test and then go live with the blessed Debian version of Dokuwiki but with my 5 or 6 changes. Please mark the bug as "won't fix" for the reason(s) you indicated. Thanks :) Bill 2010/8/29 Tanguy Ortolo <tanguy+deb...@ortolo.eu>: > Le samedi 28 août 2010, WC Jones a écrit : >> This Debian 'wish list' bug is regarding having the image layout (IE, >> /usr/share/dokuwiki/lib/images/) NOT being left as part of the >> Dokuwiki Debian layout -- because doing so makes it harder to secure >> and still be able to share/use 'smileys' etc in rendered content... >> For example, >> […] >> >> Where /images is a /var/www (public access) symbolic link to >> .DOKU_BASE.lib/images/ using: >> cd /var/www && ln -s /usr/share/dokuwiki/lib/images . >> >> My site has an internally accessible wiki for editing but serves the >> content via a special PHP content washer to the unauthenticated >> public; by having /usr/share/dokuwiki/lib/images/ as part of >> /usr/share/dokuwiki (DOKU_BASE) the security model of denying access >> (see below) makes images not render-able. > > I am not sure to really understand what you want to do. Are you trying > to deny web access to all /usr/share/dokuwiki/lib? > > That would be completely unsupported, as (from the officiel > documentation [1]): >>> lib – Files that get called externally (from your browser) > > [1] http://www.dokuwiki.org/devel:dirlayout > > -- > Tanguy Ortolo > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (GNU/Linux) > > iQIcBAEBCgAGBQJMetmVAAoJENbvpqxLENhHPXgP/162qiV9VgohD/+Y5X0KBouk > sN5TnVySOoojiZJtO4m20aM85AcRXGbbQS7wuqNNEm1/xQuqcoQWxznmlyM8f3/Q > sAVwwZzXkbV6PdaiL0OMENnaJNjOyWW7aFe1h3CTuKaVF596cbxRkKPSQV0R1q7v > ZQigX5Ktomonx1/+oLZqSv2rCIjBbi+w0YRE0VjdQIRdf0E+jaJba5uS+63TbKts > aN0jRvRZU9UvhD96vW1Vl3i+fV0zVBsr7/TJe93UZF3J6k8ZERJDVVh/8vVvvtV8 > PI82nNz4PeQgSAOQsFdzOojPdqjvMfmR30hBnY7qtZ5aldK9STumcpbkaCL1sjrj > mE3dSRreTJVNZTj29ZUQriecLn6Gk9b5KOXSWuUyf8Xbz8sjfRylX2zK87NJNqDO > P1KeIkmuAOzHZry19KJiOIsTf6jPib7p7xRt1b1ALr0g50yw7zlT/9gDmvWNaKeI > c9Xm+1S9pIYg1fbdVK8Hz2mCM/BYquYOLqcYhhLJfRKAJkKQ6JM9P2QqYnpA29zR > s+MoXb0+F69a42eYLR/Sr8RwHuALds84UXkjZolcClEKAogeR6L5Tr40wVrjf+aZ > wpGPwKqnodZ1/jKtzNWCxwRI8OvmwhHoAwiPX2oZqYagjBP+c7PbQ15/+xgJbt9f > a6onrJwdvtmfaBJDwTsL > =FuWw > -----END PGP SIGNATURE----- > > -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
