Disabling Web Directories Listing in Apache

["Kaplan, Andrew H." <AHKAPLAN@xxxxxxxxxxxx>]

Hello --

I am going through the motions of securing our Apache webserver. The server is the 2.2.15 package bundled with the CentOS 6.3 distribution.

One of the items that is being dealt with is the web directories listing vulnerability. My plan is to modify the following line in the httpd.conf file:

 

Options Indexes FollowSymLinks

 

to read as follows:

 

Options FollowSymLinks

 

Is this the correct course of action, or is there another line that should be modified either in addition to or instead of the aforementioned line?

Thanks.

 

 

The information in this e-mail is intended only for the person to whom it is
addressed. If you believe this e-mail was sent to you in error and the e-mail
contains patient information, please contact the Partners Compliance HelpLine at
http://www.partners.org/complianceline . If the e-mail was sent to you in error
but does not contain patient information, please contact the sender and properly
dispose of the e-mail.