Re: [users@httpd] Turning Directory Browsing Off

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Joshua Slive wrote:

On 5/16/06, Mark McCulligh <mmcculli@xxxxxxxxxxxxx> wrote:

Joshua Slive wrote:

> On 5/16/06, Mark McCulligh <mmcculli@xxxxxxxxxxxxx> wrote:
>
>> Hi Group,
>>
>> How do you turn Directory Browsing off. For when a user hits a folder >> without an document index page it doesn't let them browse the websites's
>> files.
>
>
> Find the "Options" directive that applies to that directory and remove
> its "Indexes" option or add "Options -Indexes" to a <Directory>
> section applying to that directory.
>
> Joshua.

Just double checking, change my directory from:
<Directory "/www">
  Options Indexes FollowSyncLinks
  AllowOverride None
  Order Allow, deny
  Allow from all
</Directory>

to:
<Directory "/www">
  Options -Indexes +FollowSyncLinks
  AllowOverride None
  Order Allow, deny
  Allow from all
</Directory>


That looks like a garbage config.  <Directory> refers to file-system
directories, like /usr/local/apache2/htdocs, not web directories.
There is no FollowSyncLinks.  And there is no need to add the +/-.
Just remove the option you don't want (Indexes).  The +/- is only
necessary if you want to merge the options with the options setting
for a parent directory.

Joshua.

What should it look like? I have a default Directory set to Deny all (Install default)
<Directory />
 Options FollowSynLinks
 AllowOverride None
 Order deny, allow
 Deny from all
</Directory>

I then have my Virtual Host websites in the folder /www and made this directory available.
<Directory "/www">
 Options -Indexes FollowSyncLinks
 AllowOverride None
 Order Allow, deny
 Allow from all
</Directory>

I then of course have all my <VirtualHost> Document Root something like /www/example_com

I through this was the best way to do it, if not what is the best(or better) way.

thanks for your help,
Mark.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux