Ubuntu server 14.04 Apache directory listing enabled by default

To my surprise I discovered that directory listing of apache is enabled by default on the apache web server on my ubuntu server 14.04.

This could be used to rip your back end code.

Please open /etc/apache2/apache2.conf in your favourite editor

and remove the work Indexes from the following part

Options Indexes FollowSymLinks

Dont forget to restart the apache by # /etc/init.d/apache2 restart

Hope this helps others to secure their servers.

I got a big scare when I discovered this being enabled by default.

0 Replies

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct