Disable Options Indexes in horizon
authorAndreas Karis <akaris@redhat.com>
Fri, 18 Nov 2016 00:30:11 +0000 (19:30 -0500)
committerAndreas Karis <akaris@redhat.com>
Fri, 18 Nov 2016 00:31:05 +0000 (19:31 -0500)
Security scanners complain that directory listings are enabled in horizon.

Change-Id: I1d7cfcb3521e8235a99bc452f1b7b92c20ce72ac
Closes-Bug: #1637576

puppet/services/horizon.yaml

index 017bb76..bae3fc0 100644 (file)
@@ -65,6 +65,7 @@ outputs:
             add_listen: false
             priority: 10
             access_log_format: '%a %l %u %t \"%r\" %>s %b \"%%{}{Referer}i\" \"%%{}{User-Agent}i\"'
+            options: ['FollowSymLinks','MultiViews']
           horizon::bind_address: {get_param: [ServiceNetMap, HorizonNetwork]}
           horizon::keystone_url: {get_param: [EndpointMap, KeystoneInternal, uri]}
           horizon::secret_key: