- up to 2.2.14, fixes CVE-2009-3095 and CVE-2009-3094

[packages/apache.git] / apache-httpd.conf

diff --git a/apache-httpd.conf b/apache-httpd.conf
index 3dbecbd6ccd39f8d08fa0f954094d060056c9a30..37b794206d09b9b0b24964669d1675637495ec6e 100644 (file)
--- a/apache-httpd.conf
+++ b/apache-httpd.conf
@@ -22,7 +22,7 @@ Group http
 # ports, instead of the default. See also the <VirtualHost>
 # directive.
 #
-# Change this to Listen on specific IP addresses as shown below t
+# Change this to Listen on specific IP addresses as shown below to
 # prevent Apache from glomming onto all bound IP addresses.
 #Listen 192.168.1.1:80
 Listen 80
@@ -39,7 +39,7 @@ ServerAdmin you@example.com
 #
 # If your host doesn't have a registered DNS name, enter its IP address here.
 #
-#ServerName www.example.com:80
+ServerName localhost
 
 # ErrorLog: The location of the error log file.
 # If you do not specify an ErrorLog directive within a <VirtualHost>
@@ -63,11 +63,30 @@ ServerTokens Full
 ServerSignature On
 HostnameLookups Off
 
+TraceEnable Off
+
 # Include other modules and packages config.
-# TODO: use conf.d here oneday
-Include httpd.conf/*.conf
+Include conf.d/*.conf
 
 # Include webapps config
 Include webapps.d/*.conf
 
-# vim:syn=apache
+<IfModule alias_module>
+       # ScriptAlias: This controls which directories contain server scripts.
+       # ScriptAliases are essentially the same as Aliases, except that
+       # documents in the target directory are treated as applications and
+       # run by the server when requested rather than as documents sent to the
+       # client.  The same rules about trailing "/" apply to ScriptAlias
+       # directives as to Alias.
+       #
+       ScriptAlias /cgi-bin/ "/home/services/httpd/cgi-bin/"
+
+       <Directory "/home/services/httpd/cgi-bin">
+               AllowOverride None
+               Options None
+               <IfModule mod_authz_host.c>
+                       Order allow,deny
+                       Allow from all
+               </IfModule>
+       </Directory>
+</IfModule>