[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian web servers giving out too much info



On Sun, Sep 28, 1997 at 02:47:56AM -0400, Brandon Mitchell wrote:
> Hi everyone,
> 
>    If you have a web server, check the following http://localhost/doc/
> then read on.
>
... 
>
> not.  Is it possible to make this info accessable by local users only be
> default or to prompt the user during installation?  (I know I can cancel
> this easily by a manual tweak.)
> 
Maybe an Apache configuration question would work.

The /usr/doc/ directory can be made available by Apache. This could be a
security hole if non-local users were able to access this information. 

Do you want /usr/doc/ to be available for public access via HTTP? [y/N]

-- 
-Tim
--
Tim P. Gerla | timg@means.net | http://www.cjnetworks.com/~coryb/timg/
OS: Linux 2.1.54. Machine: AMD 486/120, 36MB, 4.3gig.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .


Reply to: