Security question

Hi,

I have a question about security. On the piratebox, some foldes (cgi-bon, assets, etc.) are not protected. Especially in the cgi-bin, there are some python scripts. Can't that be a problem?

Thanks!

meaz

Hi,
you are talking about the directory listing, which is not disabled per default?

I won't say "no problem", but I can't imagine an attack window right now.

I'm open up to any improvement.

best regards
Matthias

Hi Matthias,

what I meant is that you can go with the browser to those folders. For example, one could type : 192.168.1.1/cgi-bin and see the files in it.

But as I said, I don't know anything about security. So if you say it's ok, that's fine with me!

Thanks

meaz

.htaccess file?

---

PirateBox Installs:
2x Zsun's (both testing, one with serial interface)
A5-V11 (mostly for OpenWRT testing DIY)
2x RPi Zero's
(one active in car 24/7, gets a lot of hits at Walmart, movie theaters and the mall)
2x RPi3's (both home servers, one Ubuntu custom install along side a ton of other services)
1x RPi2 (currently work server)

nope, not possible on lighttpd.

We may reduce the file-listing to certain foders, if possible..

I found that though:

I'll give a try...

Thx