This file is indexed.

/etc/fusionforge/httpd.conf.d/vhost-scm.inc is in fusionforge-web 6.0.5-2ubuntu1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
ServerName ${FF__core__scm_host}

SetEnvIf Request_URI . ITKUID=${FF__core__apache_user}
SetEnvIf Request_URI . ITKGID=${FF__core__apache_group}

# Run programs under a specific uid:
AssignUserIDExpr %{reqenv:ITKUID}
AssignGroupIDExpr %{reqenv:ITKGID}

<LocationMatch "^/authscm/[^/]+/">
  AuthType Basic
  AuthName "${FF__core__apache_auth_realm}"
  AuthUserFile ${FF__core__data_path}/scm-passwd
</LocationMatch>
# Cf. vhost-scm-macros.conf for the 'Require User' directive

# Load plugins after the above LocationMatch to allow specialization
IncludeOptional ${FF__core__config_path}/httpd.conf.d/vhost-scm-plugin-scm*.inc
IncludeOptional ${FF__core__data_path}/scm*-auth*.inc

Alias /robots.txt ${FF__core__source_path}/common/robots/scm.txt
<Directory "${FF__core__source_path}/common/robots/">
  Require all granted
</Directory>

# Configuration notes to setup without 'scm-passwd'

# with mod-authnz-pam (not packaged for CentOS)
#<LocationMatch "^/authscm/[^/]+/">
#  AuthType Basic
#  AuthName "SCM for FusionForge"
#  AuthBasicProvider PAM
#  AuthPAMService sshd
#</LocationMatch>

# with mod-authnz-external+pwauth (not packaged for CentOS 7)
# -> would avoid leaking the password hashes
#AddExternalAuth pwauth /usr/sbin/pwauth
#SetExternalAuthMethod pwauth pipe
#<LocationMatch "^/authscm/[^/]+/">
#  AuthType Basic
#  AuthName "SCM for FusionForge"
#  AuthBasicProvider external
#  AuthExternal pwauth
#</LocationMatch>

# with mod-auth-pgsql (no RPM package at all)
#<LocationMatch "^/authscm/[^/]+/">
#  AuthType Basic
#  AuthName "SCM for FusionForge"
#  AuthBasicProvider     pgsql
#  Auth_PG_host          127.0.0.1
#  Auth_PG_user          fusionforge_nss
#  #Auth_PG_pwd          <no password>
#  Auth_PG_database      fusionforge
#  Auth_PG_pwd_table     nss_passwd
#  Auth_PG_uid_field     login
#  Auth_PG_pwd_field     passwd
#  Auth_PG_encrypted     on
#  Auth_PG_hash_type     CRYPT
#</LocationMatch>