]>
Commit | Line | Data |
---|---|---|
788ed45b AM |
1 | # The Zoneminder web interface has been disabled by default due to a small |
2 | # security issue in the default install. | |
3 | # | |
4 | # When using Zoneminder's own authentication, recorded CCTV images are | |
5 | # accessible from the web directly without passing the authentication. This | |
6 | # means any attacker could see your CCTV images without a password. In order | |
7 | # to avoid this you can disable Zoneminder's authentication and configure | |
8 | # standard Apache authentication (see the Apache documentation for details on | |
9 | # this). | |
10 | # | |
11 | # If you still wish to use Zoneminder's own authentication, or have an | |
12 | # internal site which needs no authentication, you need to delete the line | |
13 | # marked below and restart Apache. | |
14 | ||
15 | Alias /zm "/usr/share/zoneminder/www" | |
16 | <Directory "/usr/share/zoneminder/www"> | |
17 | Options -Indexes MultiViews FollowSymLinks | |
18 | AllowOverride All | |
19 | Order allow,deny | |
20 | Allow from all | |
21 | Deny from all # DELETE THIS LINE | |
22 | </Directory> | |
23 | ||
24 | ScriptAlias /cgi-bin/zm "/usr/libexec/zoneminder/cgi-bin" | |
25 | <Directory "/usr/libexec/zoneminder/cgi-bin"> | |
26 | AllowOverride All | |
27 | Options ExecCGI | |
28 | Order allow,deny | |
29 | Allow from all | |
30 | </Directory> |