VFS-server
script obviously opens up the file system of a host computer to the entire world. If the HTTP daemon runs as a root any remote vfs client can do absolutely anything with this host's files.
.htaccess
, conf/access.conf
, HTTP Basic and extended authentication mechanisms.VFS-server.sh
's access controlsPUT
requests: This effectively makes exported file systems read-onlyDeepestRoot
and "..
" in the file paths, thus restricting user access only to a specific part of the file system tree.