Mailinglist Archive: opensuse (4208 mails)

[Anders Johansson <andjoh@xxxxxxxxxx>]

On Tuesday 13 July 2004 10.06, Rikard Johnels wrote:
> On Tuesday 13 July 2004 09:39, Anders Johansson wrote:
> > On Tuesday 13 July 2004 08.59, Rikard Johnels wrote:
> > > Hi all.
> > > How do i make sure clients CANT browse folders without index.html?
> > > I don't want people to be able to see the directorylisting.
> > > As it is now, if someone "backs up" past the html file to the root of
> > > the folder they get a listing of its contents.
> > > How to prevent that (aside from putting an empty index.html file in
> > > there...) I don't understand the "Option Indexes" directive as
> > > described on http://httpd.apache.org/docs-2.0/mod/core.html.en#options
> > > If i put "Option -Indexes" in the default-server.conf under the
> > > <Directory "/srv/www/htdocs"> it still gives the listing.
> >
> > The directive is "Options", not "Option". Did you do rcapache2 restart or
> > reload after changing the config file?
>
> Sorry! Typo. it IS "Options"
>
> # The Options directive is both complicated and important.  Please see
>         # http://httpd.apache.org/docs-2.0/mod/core.html#options
>         # for more information.
>         Options None
>
> This is my default entry in default-server.conf
> I tried "Options -Indexes" and "Options None -Indexes" anf then did a
> rcapache2 restart (and even a reboot.)
> Same problem.

Well, it certainly works for me. Are you saying that if you have a 
directory /srv/www/htdocs/foo, users can do http://server/foo/ and get a 
directory listing with Options None and no index.html? Could you post your 
config?