Make attacks slightly more difficult in some cases.

This is mandatory for PCI compliancy.

Make attacks slightly more difficult in some cases.
This is mandatory for PCI compliancy.
272414c4 · Romain Courteaud · d9f29084 · 272414c4
Commit 272414c4 authored Jan 17, 2012 by Romain Courteaud
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

slapos/recipe/apache_zope_backend/template/apache.zope.conf.in ...s/recipe/apache_zope_backend/template/apache.zope.conf.in +4 -0

No files found.
--- a/slapos/recipe/apache_zope_backend/template/apache.zope.conf.in
+++ b/slapos/recipe/apache_zope_backend/template/apache.zope.conf.in
@@ -25,6 +25,10 @@ TypesConfig conf/mime.types
 AddType application/x-compress .Z
 AddType application/x-gzip .gz .tgz

+ServerTokens Prod
+ServerSignature Off
+TraceEnable Off
+
 # As backend is trusting REMOTE_USER header unset it always
 RequestHeader unset REMOTE_USER