]>
Commit | Line | Data |
---|---|---|
788ed45b AM |
1 | # The Zoneminder web interface has been disabled by default due to a small |
2 | # security issue in the default install. | |
3 | # | |
4 | # When using Zoneminder's own authentication, recorded CCTV images are | |
5 | # accessible from the web directly without passing the authentication. This | |
6 | # means any attacker could see your CCTV images without a password. In order | |
7 | # to avoid this you can disable Zoneminder's authentication and configure | |
8 | # standard Apache authentication (see the Apache documentation for details on | |
9 | # this). | |
10 | # | |
11 | # If you still wish to use Zoneminder's own authentication, or have an | |
12 | # internal site which needs no authentication, you need to delete the line | |
13 | # marked below and restart Apache. | |
14 | ||
15 | Alias /zm "/usr/share/zoneminder/www" | |
16 | <Directory "/usr/share/zoneminder/www"> | |
17 | Options -Indexes MultiViews FollowSymLinks | |
18 | AllowOverride All | |
e97dfbb4 JR |
19 | Require all granted |
20 | Require all denied # DELETE THIS LINE | |
788ed45b AM |
21 | </Directory> |
22 | ||
ade3c7f4 SS |
23 | ScriptAlias /cgi-bin/zoneminder "/usr/lib/zoneminder/cgi-bin" |
24 | <Directory "/usr/lib/zoneminder/cgi-bin"> | |
788ed45b AM |
25 | AllowOverride All |
26 | Options ExecCGI | |
e97dfbb4 | 27 | Require all granted |
788ed45b | 28 | </Directory> |