# The Zoneminder web interface has been disabled by default due to a small # security issue in the default install. # # When using Zoneminder's own authentication, recorded CCTV images are # accessible from the web directly without passing the authentication. This # means any attacker could see your CCTV images without a password. In order # to avoid this you can disable Zoneminder's authentication and configure # standard Apache authentication (see the Apache documentation for details on # this). # # If you still wish to use Zoneminder's own authentication, or have an # internal site which needs no authentication, you need to delete the line # marked below and restart Apache. Alias /zm "/usr/share/zoneminder/www" Options -Indexes MultiViews FollowSymLinks AllowOverride All Order allow,deny Allow from all Deny from all # DELETE THIS LINE ScriptAlias /cgi-bin/zm "/usr/libexec/zoneminder/cgi-bin" AllowOverride All Options ExecCGI Order allow,deny Allow from all