[Pkg-apache-commits] r1008 - in /trunk/apache2: changelog config-dir/conf.d/security

[sf at alioth.debian.org]

Author: sf
Date: Wed Jul 29 15:29:22 2009
New Revision: 1008

URL: http://svn.debian.org/wsvn/pkg-apache/?sc=1&rev=1008
Log:
Change default for ServerTokens to OS

Modified:
    trunk/apache2/changelog
    trunk/apache2/config-dir/conf.d/security

Modified: trunk/apache2/changelog
URL: http://svn.debian.org/wsvn/pkg-apache/trunk/apache2/changelog?rev=1008&op=diff
==============================================================================
--- trunk/apache2/changelog (original)
+++ trunk/apache2/changelog Wed Jul 29 15:29:22 2009
@@ -20,6 +20,8 @@
     Also add a configuration block for the event MPM in apache2.conf.
   * Fix HTTP PUT with mod_dav failing to detect an aborted connection
     (closes: #451563).
+  * Change default for ServerTokens to 'OS', to not announce the exact module
+    versions to the worls (LP: #205996)
   * Change references to httpd.conf in apache2-doc to apache2.conf
     (closes: #465393).
   * Clarify the recommended permissions for SSL certificates in README.Debian

Modified: trunk/apache2/config-dir/conf.d/security
URL: http://svn.debian.org/wsvn/pkg-apache/trunk/apache2/config-dir/conf.d/security?rev=1008&op=diff
==============================================================================
--- trunk/apache2/config-dir/conf.d/security (original)
+++ trunk/apache2/config-dir/conf.d/security Wed Jul 29 15:29:22 2009
@@ -24,7 +24,8 @@
 # where Full conveys the most information, and Prod the least.
 #
 #ServerTokens Minimal
-ServerTokens Full
+ServerTokens OS
+#ServerTokens Full
 
 #
 # Optionally add a line containing the server version and virtual host