"아파치 디렉토리 브라우징 막기"의 두 판 사이의 차이

잔글 (로봇: 자동으로 텍스트 교체 (-[root@jmnote +[root@zetawiki))
28번째 줄: 28번째 줄:
[root@zetawiki ~]# cp -a /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.old
[root@zetawiki ~]# cp -a /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.old
[root@zetawiki ~]# sed -i 's/Options Indexes FollowSymLinks/Options FollowSymLinks/g' /etc/httpd/conf/httpd.conf
[root@zetawiki ~]# sed -i 's/Options Indexes FollowSymLinks/Options FollowSymLinks/g' /etc/httpd/conf/httpd.conf
[root@zetawiki ~]# diff /etc/httpd/conf/httpd.conf.old /etc/httpd/conf/httpd.conf332c332
[root@zetawiki ~]# diff /etc/httpd/conf/httpd.conf.old /etc/httpd/conf/httpd.conf
332c332
<    Options Indexes FollowSymLinks
<    Options Indexes FollowSymLinks
---
---

2015년 5월 11일 (월) 19:44 판

how to disable directory browsing in apache
아파치 디렉토리 브라우징 막기
아파치 디렉토리 파일 목록 안보이게 하기
Apache 디렉토리 보안 설정

1 문제상황

[root@zetawiki ~]# curl 'http://localhost/static/' -s | html2text | head -5
****** Index of /static ******
[[ICO]] Name                        Last_modified     Size Description
===========================================================================
[[DIR]] Parent_Directory                                -  
[[DIR]] Chart.js/                   21-Sep-2014 14:21    -  

2 방법

[root@zetawiki ~]# cat /etc/httpd/conf/httpd.conf | egrep -v "^[[:space:]]*$" | grep -v ^# | grep '<Directory "/var/www/html">' -A4
<Directory "/var/www/html">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
  • httpd.conf 사본 만들고 Indexes 옵션 제거
[root@zetawiki ~]# cp -a /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.old
[root@zetawiki ~]# sed -i 's/Options Indexes FollowSymLinks/Options FollowSymLinks/g' /etc/httpd/conf/httpd.conf
[root@zetawiki ~]# diff /etc/httpd/conf/httpd.conf.old /etc/httpd/conf/httpd.conf
332c332
<     Options Indexes FollowSymLinks
---
>     Options FollowSymLinks
  • 아파치 재시작
[root@zetawiki ~]# service httpd restart
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]
  • 확인 2
[root@zetawiki ~]# curl 'http://localhost/static/' -s | head -7
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /static/
on this server.</p>
→ 디렉토리 접근시 403 오류 발생함

3 같이 보기

4 참고 자료

문서 댓글 ({{ doc_comments.length }})
{{ comment.name }} {{ comment.created | snstime }}