- how to disable directory browsing in apache
- 아파치 디렉토리 브라우징 막기
- Apache 디렉토리 보안 설정
1 문제상황
[root@jmnote ~]# curl 'http://localhost/static/' -s | html2text | head -5
****** Index of /static ******
[[ICO]] Name Last_modified Size Description
===========================================================================
[[DIR]] Parent_Directory -
[[DIR]] Chart.js/ 21-Sep-2014 14:21 - 2 방법
- httpd.conf에서 /var/www/html Directory 관련 부분을 제거
- 확인
[root@jmnote ~]# cat /etc/httpd/conf/httpd.conf | egrep -v "^[[:space:]]*$" | grep -v ^# | grep '<Directory "/var/www/html">' -A4
<Directory "/var/www/html">
Options Indexes FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all- 사본 만들고 Indexes 옵션 제거
[root@jmnote ~]# cp -a /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.old
[root@jmnote ~]# sed -i 's/Options Indexes FollowSymLinks/Options FollowSymLinks/g' /etc/httpd/conf/httpd.conf
[root@jmnote ~]# diff /etc/httpd/conf/httpd.conf.old /etc/httpd/conf/httpd.conf332c332
< Options Indexes FollowSymLinks
---
> Options FollowSymLinks- 아파치 재시작
[root@jmnote ~]# service httpd restart
Stopping httpd: [ OK ]
Starting httpd: [ OK ]- 확인 2
[root@jmnote ~]# curl 'http://localhost/static/' -s | head -7
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /static/
on this server.</p>3 같이 보기
4 참고 자료
로그인하시면 댓글을 쓸 수 있습니다.
{{ comment.name }}
{{ comment.created | snstime }}
-
{{comment.page_title}} ―{{comment.name}}