[Bug 452622] [NEW] Moodle uses wrong config to restrict access to localhost

[Jeremy Bicha]

Public bug reported:

Binary package hint: moodle

During installation of moodle, the following question is asked:

  If access is restricted to localhost, other computers will be
prevented from connecting to this Moodle site. If you wish for others to
be able to use this Moodle site you must not restrict access to
localhost.

  Note: Opening your system to connections from remote hosts may have
security implications.

  Should access to this Moodle server be restricted to localhost?

If the user answers yes, /etc/apache2/conf.d/moodle includes the lines:

order deny,allow
deny from all
allow from 127.0.0.0/255.0.0.0

The final line needs to be changed to:
allow from localhost

Otherwise, the user will only get a 403 Forbidden message and these show
up in the apache2 logs:

[error] [client ::1] client denied by server configuration:
/usr/share/moodle/

::1 - - [15/Oct/2009:21:30:58 +0300] "GET /moodle/ HTTP/1.1" 403 500 "-"
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.3) Gecko/20091007
Ubuntu/9.10 (karmic) Firefox/3.5.3"

This type of bug is discussed in http://bugs.debian.org/cgi-
bin/bugreport.cgi?bug=526010 where changing the setting to "allow from
localhost" is recommended due to a change in libc6.

ProblemType: Bug
Architecture: i386
Date: Fri Oct 16 01:36:03 2009
DistroRelease: Ubuntu 9.10
Package: moodle 1.9.4.dfsg-0ubuntu2
PackageArchitecture: all
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.46-generic
SourcePackage: moodle
Uname: Linux 2.6.31-14-generic i686

** Affects: moodle (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport-bug i386 karmic

-- 
Moodle uses wrong config to restrict access to localhost
https://bugs.launchpad.net/bugs/452622
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs