The default apache.conf (ubuntu server), contains the following block:
# Sets the default security model of the Apache2 HTTPD server. It does # not allow access to the root filesystem outside of /usr/share and /var/www. # The former is used by web applications packaged in Debian, # the latter may be used for local directories served by the web server. If # your system is serving content from a sub-directory in /srv you must allow # access here, or in any related virtual host. # .... other items removed for brevity <Directory /usr/share> AllowOverride None Require all granted </Directory>
My intrepretation of this directive is that apache will allow web browsing of the items in
/usr/share folder. yet If I try to browse and item in
/usr/share/ I cant view anything?
How do I browse the content in /usr/share?
e.g. if I point a browser to
localhost/synaptic/html/index.htmlI get a 404 not found error
If apache allows browsing of this directory - do I need to lock it down on a production server?