[Xitami] win2k directory security

[Soulkoff]

Alvaro:  This is not really a security breach.  Think of Xitami as your email program; when you send someone an attachment, does the
folder your send the file from need to be shared for the email program to send out?  No, it does not, because YOU have permission to
access that folder.  Install Microsoft's IIS, and see what it does...same thing as Xitami....no shared web folder.

If you are really paranoid about it, you should run Xitami as a NT service, and create a user/group just for that service, which has
access only to the files needed.  I suppose you really should do this anyway, as there is no such thing as too much precaution.

~Matthias

----- Original Message -----
From: "Alvaro E. Siman" <alsiman@cofs.net>


> I have noticed that Xitami can serve a page for a directory that is NOT
> shared under Windows.
>
> The default Xitami pages come up despite the fact that the Xitami
> directories are "not shared" under Win2k.
>
> How can it do this???
>
> Is this a security breach that needs to be addressed in some way?
>
> If I create new directories for VHosts under the C:\Xitami\webpages\
> directory, do I need to share them out under Win2K???