Date: Thu, 21 Sep 2000 11:24:43 +0200 Reply-To: zab0ra aka t0maszekSender: Bugtraq List Subject: httpd.conf in Suse 6.4 To: BUGTRAQ@SECURITYFOCUS.COM hy... in SuSe 6.4 (maybe another) any user from any host can get info about packages installed on SuSe systems. httpd.conf file have entry "Alias /doc/ /usr/doc/" (and others) in www browser you cat set http://hosts.any/doc/packages/ and you get list of installed packages Solusion: in httpd.conf <Directory /usr/doc/packages> order deny,allow allow from your.ip.or.domain deny from all </Directory> zab0ra aka t0maszek -------------------