Charm Helpers

Merge lp:~ivoks/charm-helpers/apache-symlinks-indexes into lp:charm-helpers

  1. apache-symlinks-indexes
  2. Merge into devel
Proposed by Ante Karamatić
Status: Merged
Merged at revision: 724
Proposed branch: lp:~ivoks/charm-helpers/apache-symlinks-indexes
Merge into: lp:charm-helpers
Diff against target: 19 lines (+10/-0)
1 file modified
charmhelpers/contrib/hardening/apache/templates/99-hardening.conf (+10/-0)
To merge this branch: bzr merge lp:~ivoks/charm-helpers/apache-symlinks-indexes
Reviewer Review Type Date Requested Status
Edward Hope-Morley Approve
charmers Pending
Review via email: mp+320695@code.launchpad.net

Description of the change

Default apache install can leak some unwanted information (filesystem tree). By dropping Indexes and FollowSymLinks that can be mitigated.

This patch ensures Indexes and FollowSymLinks are disabled on Apache locations where those are otherwise, by default enabled.

To post a comment you must log in.
Revision history for this message
Edward Hope-Morley (hopem) wrote :

lgtm

review: Approve

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1=== modified file 'charmhelpers/contrib/hardening/apache/templates/99-hardening.conf'
2--- charmhelpers/contrib/hardening/apache/templates/99-hardening.conf 2017-03-20 10:28:01 +0000
3+++ charmhelpers/contrib/hardening/apache/templates/99-hardening.conf 2017-03-22 17:54:46 +0000
4@@ -15,6 +15,16 @@
5 </LimitExcept>
6 </Location>
7
8+<Directory />
9+ Options -Indexes -FollowSymLinks
10+ AllowOverride None
11+</Directory>
12+
13+<Directory /var/www/>
14+ Options -Indexes -FollowSymLinks
15+ AllowOverride None
16+</Directory>
17+
18 TraceEnable {{ traceenable }}
19 ServerTokens {{ servertokens }}
20

Subscribers

People subscribed via source and target branches