> While better out-of-the-box behavior and defaults is
> an ongoing
> improvement process, if you have concrete examples to
> share that would
> be helpful as well.
Here is a wonderful example summing up pretty much waht's wrong:
<Directory />
Options FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
</Directory>
AllowOverride None, is yet another wonderful example on itself, as
AllowOverride defaults to "All".
It should not be necessary to have
Listen 80
That should be default, and you should only have to specify a Listen statement,
when you want it to be different.
Yet another wonderful example is the extra/httpd-default.conf . Half of it is
too verbose, setting values which are default anyways: Timeout, keepalive,
MaxKeepAliveRequests, AccessFileName, ServerTokens, HostnameLookups.
While the other half sets the values to more or less sane defaults: more:
KeepAliveTimeout and HostnameLookups; and less: ServerTokens and
ServerSignature.
Those are only a few of the examples, I hope they clarify in which direction I
was heading.
So long,
Igor
--
This message posted from opensolaris.org