From: Andreas Karis <akaris@redhat.com>
Date: Fri, 18 Nov 2016 00:30:11 +0000 (-0500)
Subject: Disable Options Indexes in horizon
X-Git-Tag: opnfv-6.0.0~1389^2
X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=commitdiff_plain;h=0213ae9bd5596ca2be7d17e3294bec3791321b0f;hp=-c;p=apex-tripleo-heat-templates.git

Disable Options Indexes in horizon

Security scanners complain that directory listings are enabled in horizon.

Change-Id: I1d7cfcb3521e8235a99bc452f1b7b92c20ce72ac
Closes-Bug: #1637576
---

0213ae9bd5596ca2be7d17e3294bec3791321b0f
diff --git a/puppet/services/horizon.yaml b/puppet/services/horizon.yaml
index 017bb76f..bae3fc0e 100644
--- a/puppet/services/horizon.yaml
+++ b/puppet/services/horizon.yaml
@@ -65,6 +65,7 @@ outputs:
             add_listen: false
             priority: 10
             access_log_format: '%a %l %u %t \"%r\" %>s %b \"%%{}{Referer}i\" \"%%{}{User-Agent}i\"'
+            options: ['FollowSymLinks','MultiViews']
           horizon::bind_address: {get_param: [ServiceNetMap, HorizonNetwork]}
           horizon::keystone_url: {get_param: [EndpointMap, KeystoneInternal, uri]}
           horizon::secret_key: