LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   disable alias? (https://www.linuxquestions.org/questions/linux-server-73/disable-alias-4175459678/)

sniper8752 04-26-2013 10:32 AM

disable alias?
 
I was following a tutorial on hardening linux, and one of the modules they disabled in apache was alias.

I was getting an error with it, and apache was not booting/restarting, and so I then decided to enable the module again, and it seems to work ok now. Is there any benefit to disabling the alias module in apache?

Habitual 04-26-2013 12:44 PM

Quote:

Originally Posted by sniper8752 (Post 4939351)
I was following a tutorial on hardening linux, and one of the modules they disabled in apache was alias.

I was getting an error with it, and apache was not booting/restarting, and so I then decided to enable the module again, and it seems to work ok now. Is there any benefit to disabling the alias module in apache?

I suggest you read from the source...http://httpd.apache.org/docs/current/mod/mod_alias.html and you can make your own assessment. And before "hardening anything", make regular backups.

Did this "tutorial" say why disabling this was needed?
Post the URL for this tutorial.
What you read is every bit as important as where you read it.

Have a Great Day!

sniper8752 04-27-2013 08:46 AM

So it maps urls to system files? so if I want /var/log/log.log, I would have to have this enabled?
here is the tutorial link: http://www.thegeekstuff.com/2011/03/apache-hardening/

Habitual 04-27-2013 02:22 PM

10 Tips to Secure Your Apache Web Server on UNIX / Linux says in part "If you are planning to install apache from source, you should disable the following modules. If you do ./configure –help, you’ll see all available modules that you can disable/enable.
...
alias – Mapping of requests to different filesystem parts[/CODE]

Did you install from source?
Quote:

Originally Posted by sniper8752 (Post 4939995)
want /var/log/log.log

for what, pray tell?
Leave it alone. it has NOTHING to do with apache OR securing Apache.


All times are GMT -5. The time now is 03:41 PM.