On Fri, 12 Mar 2010 18:25 -0700, "Theo de Raadt" <dera...@cvs.openbsd.org> wrote: > That's a lot of words. > > The default configuration is not going to be changed in this way.
To be honest, my patch is selfish. I get perfect vulnerability assessment scores on OpenBSD boxes when doing vulnerability scans until I enable Apache. Turning Indexes off gets me back down to zero vulnerability status... the unreachable ground of the Linux admin ;) Compliance an audit folks like perfect scores too. I can make the config change myself. I withdraw the patch. Brad
