Should apache ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ line be removed in production?

Posted by Tchalvak on Server Fault See other posts from Server Fault or by Tchalvak
Published on 2011-06-07T18:02:25Z Indexed on 2012/10/23 5:10 UTC
Read the original article Hit count: 507

Filed under:
|
|

Here is the part of my current apache config that refers to cgi-bin stuff. This info was included in the default configuration in debian. Should this be removed on a live/production machine?

    ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
    <Directory "/usr/lib/cgi-bin">
        AllowOverride None
        Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
        Order allow,deny
        Allow from all
    </Directory>

© Server Fault or respective owner

Related posts about apache2

Related posts about cgi