How to disable directory listing of /icons/

4 posts / 0 new

Topic locked

Last post

#1 Sat, 06/06/2015 - 02:05

Purple Edge

How to disable directory listing of /icons/

I ran Nikto over my site and it showed that mysite.com/icons/ gave a directory listing, so does...

http://virtualmin.com/icons/

...how do we disable that?

#2 Sat, 06/06/2015 - 02:34

Diabolico

.htaccess and use this "Options All -Indexes"

- I often come to the conclusion that my brain has too many tabs open. -
Failing at desktop publishing & graphic design since 1994.

#3 Sun, 06/21/2015 - 20:22 (Reply to #2)

Purple Edge

Thanks Diabolico,

The listing results from an alias of the apache /icons/ folder - I "fixed" it by editing my httpd.conf file so it now contains...

#
# DocumentRoot: The directory out of which you will serve your
# documents. By default, all requests are taken from this directory, but
# symbolic links and aliases may be used to point to other locations.
#
DocumentRoot "/var/www/html"
 
# New stuff \#
 
Alias /icons/ /user/www/icons/
 
<Directory "/var/www/icons">
     Options -Indexes +MultiViews
     AllowOverride None
     Order allow,deny
     Allow from all
</Directory>
 
#end of new stuff

#4 Sat, 06/06/2015 - 03:02

Diabolico

Sorry i'm stupid this morning, blame lack of first morning coffee. Didnt notice that icons are from apache so this is what you need to do on Centos:

- go to /etc/httpd/conf.d
- nano autoindex.conf (or any other editor)
- find line something like this "Options Indexes MultiViews FollowSymlinks"
- delete Indexes
- restart apache
- no more indexing (you will get 403)

Not sure for other OS but i think it should be the same.

- I often come to the conclusion that my brain has too many tabs open. -
Failing at desktop publishing & graphic design since 1994.

Topic locked