- up to 2.2.14, fixes CVE-2009-3095 and CVE-2009-3094

[packages/apache.git] / apache-mod_autoindex.conf

diff --git a/apache-mod_autoindex.conf b/apache-mod_autoindex.conf
index 160f39b75e4ed87b877661ecb9237a89fac0c225..1fd761511c4c67a45cc1938fcee7f031c721e2fa 100644 (file)
--- a/apache-mod_autoindex.conf
+++ b/apache-mod_autoindex.conf
@@ -1,5 +1,5 @@
 # $Id$
-LoadModule autoindex_module           modules/mod_autoindex.so
+LoadModule autoindex_module    modules/mod_autoindex.so
 
 #
 # Directives controlling the display of server-generated directory listings.
@@ -23,10 +23,12 @@ IndexOptions FancyIndexing VersionSort
 Alias /icons/ "/home/services/httpd/icons/"
 
 <Directory "/home/services/httpd/icons">
-    Options Indexes MultiViews
-    AllowOverride None
-    Order allow,deny
-    Allow from all
+       Options Indexes MultiViews
+       AllowOverride None
+       <IfModule mod_authz_host.c>
+               Order allow,deny
+               Allow from all
+       </IfModule>
 </Directory>
 
 #
@@ -95,5 +97,3 @@ HeaderName HEADER.html
 IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
 
 </IfModule>
-
-# vim: filetype=apache ts=4 sw=4 et