]>
Commit | Line | Data |
---|---|---|
1 | # The Zoneminder web interface has been disabled by default due to a small | |
2 | # security issue in the default install. | |
3 | # | |
4 | # When using Zoneminder's own authentication, recorded CCTV images are | |
5 | # accessible from the web directly without passing the authentication. This | |
6 | # means any attacker could see your CCTV images without a password. In order | |
7 | # to avoid this you can disable Zoneminder's authentication and configure | |
8 | # standard Apache authentication (see the Apache documentation for details on | |
9 | # this). | |
10 | # | |
11 | # If you still wish to use Zoneminder's own authentication, or have an | |
12 | # internal site which needs no authentication, you need to delete the line | |
13 | # marked below and restart Apache. | |
14 | ||
15 | Alias /zm "/usr/share/zoneminder/www" | |
16 | <Directory "/usr/share/zoneminder/www"> | |
17 | Options -Indexes MultiViews FollowSymLinks | |
18 | AllowOverride All | |
19 | Require all granted | |
20 | Require all denied # DELETE THIS LINE | |
21 | </Directory> | |
22 | ||
23 | ScriptAlias /cgi-bin/zoneminder "/usr/lib/zoneminder/cgi-bin" | |
24 | <Directory "/usr/lib/zoneminder/cgi-bin"> | |
25 | AllowOverride All | |
26 | Options ExecCGI | |
27 | Require all granted | |
28 | </Directory> |