Freeze break request: Fix mirrorlist2 static files

Stephen John Smoogen smooge at gmail.com
Tue Apr 14 19:28:09 UTC 2015


+1 to the apache fix. It looks to cover the issues needed.

On 14 April 2015 at 04:01, Patrick Uiterwijk <puiterwijk at redhat.com> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi,
>
> Currently, static files for Mirrorlist2 give 403 Access Denied's.
> Could I get +1s to apply this fix:
>
>
> commit ee955fa452df4c753c276b37a34af04933288e20
> Author: Patrick Uiterwijk <puiterwijk at redhat.com>
> Date:   Tue Apr 14 09:58:38 2015 +0000
>
>     Add a Location tag for static
>
>     For every alias, you need to have either a Directory or a Location
>     that matches it.
>     Source:
> https://wiki.apache.org/httpd/ClientDeniedByServerConfiguration
>
>     Upstream PR: https://github.com/fedora-infra/mirrormanager2/pull/41
>
>     Signed-off-by: Patrick Uiterwijk <puiterwijk at redhat.com>
>
> diff --git
> a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
> b/roles/mirrormanager/mirrorlist2/templa
> index 91800c5..adb5182 100644
> - --- a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
> +++ b/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
> @@ -52,3 +52,15 @@ WSGIScriptAlias /mirrorlist
> /usr/share/mirrormanager2/mirrorlist_client.wsgi
>          Allow from all
>      </IfModule>
>  </Location>
> +
> +<Location /static>
> +    <IfModule mod_authz_core.c>
> +        # Apache 2.4
> +        Require all granted
> +    </IfModule>
> +    <IfModule !mod_authz_core.c>
> +        # Apache 2.2
> +        Order deny,allow
> +        Allow from all
> +    </IfModule>
> +</Location>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQIcBAEBCgAGBQJVLOWQAAoJEIZXmA2atR5Q1BUQAIn2p750BOsqOdo0PDB/s266
> qnmwLnAeGUFbpZLL0RTTcKO+6hxQD/nAvWuvFfx9/YyhWkrHHeor18pdZnzXKCWZ
> vdVhfo3jNP4zLkavFeV0m5rHArEmjD95Clc7cv7CYhdWQgT/B6DKvTJUFKb1HgfP
> FkYK6KYpo7aVY7odbrIMUlxFkTzX5x7ydwlHkwiQqTREwShpNCyczKdr2f1Q0yIi
> +T7Aeh0341aym/VcT7DlkIq3fYS381ulmpA4NOHyEJ9v2DVdhEqbCRW94iqAdMZw
> uYXSfJI6oLeRYUbXbnBA8VqPnpP2AI07kBh+eS+ji/+CfOzP0G+kCA5sQqwTZKkm
> 2RJH3TlpS5iPnq9J5tFl1wUBRlLBIjJK4xrILYYrXY9jonNyzfHXlq+6preE1duf
> qNb5YBtbIcSZJnTZOupoHeSqz2tklMEi0oCVn5g14SUN0Zvf0csv0vSNwH74UgCv
> sulJyb/prdYlGC+pqSI/QD7Z7z+1vyl+31D6qxfbT8QlBh2I/oErPB1ganoLA2KQ
> AfoOT3QhrorhJh0aLm0mit0GQrYGCnHHlQmgNN5WBY6+ft/aG19gGrF710pZN8eF
> UDquJHxuw0REEi7/EaHr9Hhegw0ON+xWjkLwqqvCM6ndjFfMla8gazi2re071wgD
> gs6Ey7ejfdGhDzLX+qJv
> =Iz0I
> -----END PGP SIGNATURE-----
> _______________________________________________
> infrastructure mailing list
> infrastructure at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/infrastructure




-- 
Stephen J Smoogen.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20150414/c90aea15/attachment-0001.html>


More information about the infrastructure mailing list