BugTraq
Root Directory Listing on RH default apache Oct 27 2003 12:38PM
tfm tfm org (1 replies)
Re: Root Directory Listing on RH default apache Oct 28 2003 08:40AM
Stephen Samuel (samuel bcgreen com) (1 replies)
You can fix it by changing the line to:
<LocationMatch "^/*$>

On the other hand, if youc an guess the name of any directory without
it's own index.html file, you'll still get a listing. If you're worried
about people seeing your directories, you should turn off the feature
entirely.

tfm (at) tfm (dot) org [email concealed] wrote:
....
> ==============================================
>>From /etc/httpd/conf/httpd.conf
> #
> # Disable autoindex for the root directory, and present a
> # default Welcome page if no other index page is present.
> #
> <LocationMatch "^/$>
> Options -Indexes
> ErrorDocument 403 /error/noindex.html
> </LocationMatch>
> ==============================================
....
>
> It's true if you made a request like
>
> GET / HTTP/1.0
>
> Not true if you type:
>
> GET // HTTP/1.0

--
Stephen Samuel +1(604)876-0426 samuel (at) bcgreen (dot) com [email concealed]
http://www.bcgreen.com/~samuel/
Powerful committed communication. Transformation touching
the jewel within each person and bringing it to light.

[ reply ]
Re: Root Directory Listing on RH default apache Nov 02 2003 08:36AM
M.Hirsch (M Hirsch gmx de)


 

Privacy Statement
Copyright 2010, SecurityFocus