[Mapserver-users] securing .map best practice

[Martin, Daniel A]

(I am not a security expert)
The most important thing is that .map file reside outside the web
server.  There is no benefit to placing it inside the webserver.

With that simple rule followed and assuming your system itself is
secure, I can't foresee a way someone could get at your .map file.  

-Dan

> -----Original Message-----
> From: mapserver-users-admin at lists.gis.umn.edu 
> [mailto:mapserver-users-admin at lists.gis.umn.edu] On Behalf Of 
> Oliver Meyn
> Sent: Wednesday, February 18, 2004 9:24 AM
> To: mapserver-users at lists.gis.umn.edu
> Subject: [Mapserver-users] securing .map best practice
> 
> 
> Hi all,
> 
> Now that I'm about to start using PostGIS my .map file is 
> going to have sensitive information in it, and so I'm 
> wondering what others have done as the common/best practice 
> for securing it against prying eyes.  I'm using apache 1.3 on 
> linux and I don't think restricting access to the directory 
> containing .map will work since the webserver needs to read 
> the file.  All tips appreciated.
> 
> Thanks,
> Oliver
> 
> _______________________________________________
> Mapserver-users mailing list
> Mapserver-users at lists.gis.umn.edu 
> http://lists.gis.umn.edu/mailman/listinfo/maps> erver-users
>