Ensure no directory listing is active

By default, puppetlabs-apache module enables Indexes option, which can
lead in data/structure leak.

The following patch disable that option on a global base, since we
shouldn't need such a feature.

Closes-Bug: #1854442
Change-Id: Icba53f4e32237556608f4cb6dcd9da1a71705c19
This commit is contained in:
Cédric Jeanneret 2019-12-02 10:55:03 +01:00
parent 9606137063
commit ad48860b75
3 changed files with 9 additions and 1 deletions

View File

@ -365,6 +365,7 @@ define openstacklib::wsgi::apache (
error_log_file => $error_log_file,
error_log_pipe => $error_log_pipe,
error_log_syslog => $error_log_syslog,
options => ['-Indexes', '+FollowSymLinks','+MultiViews'],
}
Package<| title == 'httpd' |>

View File

@ -0,0 +1,6 @@
---
security:
- Do not authorize directory listing
fixes:
- rhbz#1778052
- LP#1854442

View File

@ -94,7 +94,8 @@ describe 'openstacklib::wsgi::apache' do
:access_log_format => false,
:error_log_file => nil,
:error_log_pipe => nil,
:error_log_syslog => nil
:error_log_syslog => nil,
:options => ['-Indexes', '+FollowSymLinks','+MultiViews'],
)}
it { should contain_concat("#{platform_params[:httpd_ports_file]}") }