[Nut-upsuser] upsset.conf : Restriction directives need updating

[Phil Stracchino]

The good news:
While gathering information for this post, I solved the ORIGINAL problem 
I was going to post about, which was figuring out how to change the 
low-battery limit on my CyberPower PR3000LCDRTXL2U UPS with expansion 
chassis.  With three battery packs, the default 20% is absurd.


However, during the course of finally getting around to getting 
upsdet.cgi working, I found the security advice in upsset.conf to be 
highly outdated.

upsset.conf gives the following access restriction syntax ...

# 	<Files upsset.cgi>
#	deny from all
#	allow from your.network.addresses
#	</Files>

This syntax is long obsolete, at least in Apache.  It should currently 
be done in a fashion generally similar to this:


     ScriptAlias /upsstats.cgi /usr/share/nut/cgi/upsstats.cgi
     ScriptAlias /upsset.cgi /usr/share/nut/cgi/upsset.cgi

     <Directory "/usr/share/nut/cgi">
         Options +Includes +ExecCGI
         AllowOverride Limit
         <RequireAny>
             Require local
             Require ip aa.bb.cc.dd/nn
         </RequireAny>
     </Directory>



-- 
   Phil Stracchino
   Babylon Communications
   phils at caerllewys.net
   phil at co.ordinate.org
   Landline: +1.603.293.8485
   Mobile:   +1.603.998.6958