Topic: Disable index listing of Apache "icons" folder

[pizzaco]

The nature of our business requires a quarterly security scan. Our scanning vendor discovered that mydomain.com/icons/ is returning an index listing. Although indexing this folder probably isn't a volunerablity, I want to shut it off.

I think I can do this by creating a custom template to modify the Apache config file, but I only want to do that as a last resort.  Does anyone know of a "built-in" way to shut this off?

Thanks

[cactus]

I think I can do this by creating a custom template to modify the Apache config file, but I only want to do that as a last resort.  Does anyone know of a "built-in" way to shut this off?

There is no built-in way to shut this off. The custom-template route is the way to go, here is a simple way to set the "Options Indexes" to "Options -Indexes in a custom-template.

Code: [Select]

mkdir -p /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf
sed -e 's/Indexes/\-Indexes/' \
< /etc/e-smith/templates/etc/httpd/conf/httpd.conf/90e-smithAccess10icons \
> /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/90e-smithAccess10icons
expand-template /etc/httpd/conf/httpd.conf
sv t httpd-e-smith


[pizzaco]

Thanks, cactus.  That did the trick.  I did have to add an single-quote to the sed command and also collapse it back to one line.

[cactus]

I did have to add an single-quote to the sed command and also collapse it back to one line.

Oops, it was missing a quote indeed, I fixed that. The multiline command should not be an issue normally, the trailing backslashes should allow the command to brake over multiple lines. Are you sure the backslashes are the last token on the line?

[pizzaco]

There was an extra trailing space after the first back slash. Didn't know to check for something like that. Thanks for the tip.

[cactus]

There was an extra trailing space after the first back slash. Didn't know to check for something like that. Thanks for the tip.

You're welcome, I have ran into that in the past scratching my head as well...

[CharlieBrady]

Does anyone know of a "built-in" way to shut this off?

Yes, raise the issue via the bug tracker, and wait for the issue to be addressed via an update in the distribution.

The other way is a custom template. You should do both.

[pizzaco]

Opened a bug:

http://bugs.contribs.org/show_bug.cgi?id=6769