Skip to content

[security] Disable Apache2 mod_status across HAXiam install scripts#17

Merged
btopro merged 1 commit intohaxtheweb:masterfrom
winstonwumbo:master
Mar 26, 2026
Merged

[security] Disable Apache2 mod_status across HAXiam install scripts#17
btopro merged 1 commit intohaxtheweb:masterfrom
winstonwumbo:master

Conversation

@winstonwumbo
Copy link
Copy Markdown
Contributor

New Features

  • Disables Apache2 status module for all PHP-based HAXiam deployments
    • On several Linux distributions, the Apache2 package has its status module enabled by default
    • There's the potential to leak system data like: logs, users, URLs, and even local file paths

Related Issue(s)

@btopro btopro merged commit ffcac06 into haxtheweb:master Mar 26, 2026
1 check passed
@github-actions github-actions bot locked and limited conversation to collaborators Mar 26, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants