[gopher] Another batch of Motsognir questions

[Martin Kukac]

Hello and happy new year to all!

I have some further questions about how (and why) Motsognir works. Even 
though I could send it directly to Mateusz, I'm asking here, because it 
may help others in the future. I hope y'all don't mind.

1. external scripts

On my gopher server I have bash, perl and PHP scripts and the do not 
behave the same way. I include all of them in the gophermap using "=", 
all of them have 755 permissions, but only PHP seems to work.

To test it I placed this in the gophermap:

=test.pl
=test.sh
=test.php

All files had just a single line of code, printing "iTest.PL", 
"iTest.SH" and "iTest.PHP". The resulting gophermap returned to client 
only the output contained only PHP output, in /var/log/messages I found

Jan  4 12:34:47 i-logout journal: motsognir [46.13.138.74][11235]: 
running server-side app '/var/gopher/test.php'

Nothing else. What am I missing? I can rewrite all scripts to PHP if I 
have to, but isn't there another way?


2. directories outside GopherRoot

When using Gophernicus, I had some directories all over the filesystem 
symlinked to GopherRoot and listed through gopher. Motsognir seems to 
prevent this because it thinks it is evasion attempt:

Jan  4 12:50:44 i-logout journal: motsognir [46.13.138.74][11396]: 
Requested resource: /software/ / Local resource: /var/gopher/software/
Jan  4 12:50:44 i-logout journal: motsognir [46.13.138.74][11396]: 
Evasion check: path '/var/gopher/software/' (/var/ftp/pub/) do not seem 
to belong to '/var/gopher/'
Jan  4 12:50:44 i-logout journal: motsognir [46.13.138.74][11396]: 
Evasion attempt. Forbidden!

Is this necessary? I can't imagine how there could be symlinked folder 
without my knowledge, so this could be probably allowed.

Thanks for the help.

Martin