14 March 2005

H-Sphere versions: all

H-Sphere Apache security fix sets more secure permissions and ownership recursively to all files and subdirectories in the /hsphere/shared/apache/htdocs directory on all Web and Mail servers and corrects some directives in Apache config files on CP server, Web and Mail servers.

To apply the fix, please go through the following steps:

1. Log into your CP server as root.
2. Download the package:
   On Linux:
   
   # wget http://www.psoft.net/shiv/HS/apache_security_fix-0.3.tgz
   On FreeBSD:
   
   # fetch http://www.psoft.net/shiv/HS/apache_security_fix-0.3.tgz
3. Unpack the package:
   
   # tar zxf apache_security_fix-0.3.tgz
4. Enter the apache_security_fix-0.3 directory and run the fix script:
# cd apache_security_fix-0.3
# sh ./update.sh
5. Restart your H-Sphere CP.