[Pkg-javascript-devel] Bug#529708: /etc/apache2/conf.d/javascript-common.conf has Indexes turned on by default

Francois Marier francois at debian.org
Thu May 21 03:35:27 UTC 2009


Package: javascript-common
Version: 5
Severity: normal

I noticed, by running automated Apache security checks [0], that the apache config
file shipped by javascript-common (/etc/apache2/conf.d/javascript-common.conf) has
Indexes enabled by default:

  <Directory "/usr/share/javascript/">
  	Options Indexes FollowSymLinks MultiViews
  </Directory>

Is this a good reason for this? Otherwise, it might be safer to turn that off...

Cheers,
Francois

[0] apache_check.sh: http://pipes.sdf1.org/scripts/





More information about the Pkg-javascript-devel mailing list