Bug 1648192
| Summary: | Horizon should not allow to access icons/ directory and the directory should not be shown as index. | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Keigo Noha <knoha> |
| Component: | openstack-tripleo-heat-templates | Assignee: | Luke Short <lshort> |
| Status: | CLOSED ERRATA | QA Contact: | Victor Voronkov <vvoronko> |
| Severity: | medium | Docs Contact: | |
| Priority: | low | ||
| Version: | 13.0 (Queens) | CC: | emacchi, lshort, mburns, rdopiera |
| Target Milestone: | z6 | Keywords: | Triaged, ZStream |
| Target Release: | 13.0 (Queens) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | openstack-tripleo-heat-templates-8.3.1-4.el7ost | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2019-04-30 17:27:35 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Hi Emilien and team, Would you please update this bugzilla with the current status? Best Regards, Keigo Noha Hi Emilien and team, Do you have any updates on this bugzilla? Regards, Keigo Noha Hi Emilien, Do you have any updates on this bugzilla? Regards, Keigo Noha Hi Emilien, In Upstream, the fix for stable/queens was merged. Would you please proceed the backport process to RHOSP13? Best Regards, Keigo Noha A Brew build is now available for QE. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:0939 |
Description of problem: Horizon should not allow to access icons/ directory and the directory should not be shown as index. Version-Release number of selected component (if applicable): Current T-H-T How reproducible: Always Steps to Reproduce: 1. Access to <overcloud horizon URL>/icons 2. 3. Actual results: Currently, a user can see indexes of the directory. Expected results: The indexes should not be visible. Additional info: Trying to disable Indexes in alias.conf with the following configuration is not usable ~~~ parameter_defaults: ControllerExtraConfig: apache::mod::alias::icons_options: '-Indexes MultiViews' ~~~