Red Hat ENTERPRISE LINUX 3 Reference Manual

Also see for ENTERPRISE LINUX 3 - SECURITY GUIDE: Tuning guide Installation guide Installation guide Installation guide Manual

Contents

130 Chapter 10. Apache HTTP Server10.2.2.1. UserDir MappingThe UserDir directive is used to enable URLs such as http://example.com/~bob/ to map toa subdirectory within the home directory of the user bob, such as /home/bob/public_html/. Aside-effect of this feature allows a potential attacker to determine whether a given username is presenton the system. For this reason, the default configuration for Apache HTTP Server 2.0 disables thisdirective.To enable UserDir mapping, change the directive in httpd.conf from:UserDir disableto the following:UserDir public_htmlFor more on this topic, refer to the following documentation on the Apache Software Foundation’swebsite:• http://httpd.apache.org/docs-2.0/mod/mod_userdir.html#userdir10.2.2.2. LoggingThe following logging directives have been removed:• AgentLog• RefererLog• RefererIgnoreHowever, agent and referrer logs are still available using the CustomLog and LogFormat directives.For more on this topic, refer to the following documentation on the Apache Software Foundation’swebsite:• http://httpd.apache.org/docs-2.0/mod/mod_log_config.html#customlog• http://httpd.apache.org/docs-2.0/mod/mod_log_config.html#logformat10.2.2.3. Directory IndexingThe deprecated FancyIndexing directive has now been removed. The same functionality is availablethrough the FancyIndexing option within the IndexOptions directive.The new VersionSort option to the IndexOptions directive causes files containing versionnumbers to be sorted in a more natural way. For example, httpd-2.0.6.tar appears beforehttpd-2.0.36.tar in a directory index page.The defaults for the ReadmeName and HeaderName directives have changed from README andHEADER to README.html and HEADER.html.For more on this topic, refer to the following documentation on the Apache Software Foundation’swebsite:• http://httpd.apache.org/docs-2.0/mod/mod_autoindex.html#indexoptions• http://httpd.apache.org/docs-2.0/mod/mod_autoindex.html#readmename• http://httpd.apache.org/docs-2.0/mod/mod_autoindex.html#headername