[Mapserver-users] securing .map best practice

[Kralidis,Tom [Burlington]]

> -----Original Message-----
> From: mapserver-users-admin at lists.gis.umn.edu 
> [mailto:mapserver-users-admin at lists.gis.umn.edu] On Behalf Of 
> Oliver Meyn
> Sent: Wednesday, February 18, 2004 10:24 AM
> To: mapserver-users at lists.gis.umn.edu
> Subject: [Mapserver-users] securing .map best practice
> 
> 
> Hi all,
> 
> Now that I'm about to start using PostGIS my .map file is 
> going to have sensitive information in it, and so I'm 
> wondering what others have done as the common/best practice 
> for securing it against prying eyes.  I'm using apache 1.3 on 
> linux and I don't think restricting access to the directory 
> containing .map will work since the webserver needs to read 
> the file.  All tips appreciated.
> 

Options:

- restrict web access to the mapfile in your http configuration
- place the mapfile in a directory which is not web accesible
- pass the mapfile value via MS_MAPFILE as an environment variable in your
http configuration

Hope that helps.

..Tom

=========================
Tom Kralidis
Systems Scientist
Environment Canada
Tel: +01-905-336-4409
http://www.ec.gc.ca/cise/

> Thanks,
> Oliver
> 
> _______________________________________________
> Mapserver-users mailing list
> Mapserver-users at lists.gis.umn.edu 
> http://lists.gis.umn.edu/mailman/listinfo/maps> erver-users
>