mod_verify 1.4 review

Download

mod_verify Apache module is a ownership & permission verification for Apache 1.3. This module is intended to verify ownership and

License:	Freeware
File size:	0K
Developer:	Anthony C Howe

mod_verify Apache module is a ownership & permission verification for Apache 1.3.

This module is intended to verify ownership and permissions of directories and files within a web site's hierarchy without having to use setuid() and setgid(), ie. no root privileges needed.

In order for this module to operate without the use of setuid(), setguid(), and root privilages, the web server requires sufficient permissions to access requested document: world readable; or group readable where the the web server is a member of the document's group. Note in the latter case, the web server is limited to being a member of NGROUPS_MAX groups.

If the web server doesn't have sufficent rights to access a document, then your will get a 403 Forbidden error.

Once the web server can read the requested document, the module runs through the following heuristic to judge whether the request can be completed or not:

The containing directory of the requested document is determined as specified by the Verify directive below.
If the directory is world writable, then if VerifyTest dir_not_o_w is set true (default false), then the request fails; otherwise it succeeds.
If VerifyTest req_not_o_w is true (default true) and the requested document is world writable, then the request fails.
If VerifyTest dir_not_g_w is true (default false) and the directory is group writable, then the request fails.
If VerifyTest req_not_g_w is true (default false) and the requested document is group writable, then the request fails.
If VerifyTest one_hard_link is true (default true) and the requested file is hard linked more than once, the request fails.
If VerifyTest symlink_owner is true (default true) and the requested document is a symbolic link and the user or group ids of the link are not the same as the linked file, then the request fails.
If VerifyTest same_group is true (default true) and the requested document is a file and its group is not the same as the directory, then the request fails.
If VerifyTest setuid_root is true (default true) and the requested document is setuid to root, then the request succeeds.
If VerifyTest same_member is true (default true) and the requested document is not owned by a member of the directory's group then the request fails.
Otherwise the request is succeeds.
When a request fails you will see a 412 Precondition Failed error.

Requirements:
Apache 1.3.x

mod_verify 1.4 screenshot
Zoom

mod_verify 1.4 keywords

mod_verify 1.4: mod_verify Apache module is a ownership & permission verification for Apache 1.3. This module is intended to verify ownership and
mod_become 1.03: mod_become module enables the web server to take on the access rights of a user & group, so that ~users can make available files to t
mod_xobjex 1.0.1: mod_xobjex converts each HTTP Request into an XML Graph and applies the requested XSLT stylesheet
mod_ruid 0.6: mod_ruid is an Apache module based on mod_suid2 only for linux. -it runs only on linux because afaik only linux has implemented po
mod_vd 2.0: mod_vd Apache 2.0 module is similar to mod_vhost_alias, in that it maps the request host name and URI to the file system
mod_loopback 2.1: mod_loopback module serves as a web client debugging tool and simply sends back plain text output of everything received conerning a
mod_access_referer 1.0.2: mod_access_referer is a module for the Apache HTTP Server that provides access control based on "Referer" HTTP header content. Why

mod_verify 1.4 review

Alternative/similar