Index of not protected on centos 7 KVM fresh installs

Recently I have been doing multiple installs of Virtualmin on OpenVZ and KVM systems. I have noticed that on KVM every single install that the "Index of" folder is viewable from the web via direct access to the servers IP address.

I have attached an image of what is seen when you go directly to the server IP.

This also happens with any virtual servers that you create.

This is not a problem to me as I am using this server for DNS bind only for nameservers but It is worth noting. If you need any info let me know and Ill get it for you.

Needs work


Howdy -- is it possible that the particular domain you're viewing there is a pre-existing default domain?

On a CentOS system, that would be /var/www/html.

If you add a file to /var/www/html, does that show up?

Or are you thinking that it's one of the domains you've added to your server through Virtualmin?

litonfiredesign's picture
Submitted by litonfiredesign on Mon, 12/19/2016 - 19:47

No sorry,

This happens with nothing added to virtualmin, fresh install, no domains added, just flat out virtualmin.

Install done. Head to ip, get that.

--- Sorry didnt fully read your response. Will add a test html, I think you may be right.

Will update shortly

litonfiredesign's picture
Submitted by litonfiredesign on Mon, 12/19/2016 - 19:57

Yep, You where right, it was the empty vars/www folder, It threw me off because the sites have the folder above "public_html" protected.

Sorry about the misinformation.

Regards, Kyle