Skip to content

Commit e71d4d4

Browse files
yadvrDaanHoogland
authored andcommitted
CLOUDSTACK-10304: turn off apache2 server tokens and signature in systemvms (#2563)
* systemvm: turn off apache2 server tokens and signature This turns off apache2 server version signature/token in headers. Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com> * systemvm: remove invalid code as conf.d is not available now Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
1 parent 5d05da2 commit e71d4d4

2 files changed

Lines changed: 3 additions & 3 deletions

File tree

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
ServerTokens Prod
2+
ServerSignature Off
3+
TraceEnable Off

systemvm/debian/opt/cloud/bin/setup/common.sh

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -496,9 +496,6 @@ clean_ipalias_config() {
496496

497497
setup_apache2_common() {
498498
sed -i 's/^Include ports.conf.*/# CS: Done by Python CsApp config\n#Include ports.conf/g' /etc/apache2/apache2.conf
499-
[ -f /etc/apache2/conf.d/security ] && sed -i -e "s/^ServerTokens .*/ServerTokens Prod/g" /etc/apache2/conf.d/security
500-
[ -f /etc/apache2/conf.d/security ] && sed -i -e "s/^ServerSignature .*/ServerSignature Off/g" /etc/apache2/conf.d/security
501-
502499
# Disable listing of http://SSVM-IP/icons folder for security issue. see article http://www.i-lateral.com/tutorials/disabling-the-icons-folder-on-an-ubuntu-web-server/
503500
[ -f /etc/apache2/mods-available/alias.conf ] && sed -i s/"Options Indexes MultiViews"/"Options -Indexes MultiViews"/ /etc/apache2/mods-available/alias.conf
504501

0 commit comments

Comments
 (0)