[AMBARI-25252] Disable directory Indexing at /resources

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.8.0, 2.7.4
• Component/s: ambari-server
• Labels: pull-request-available
• Assignee: Attila Magyar
• Reporter: Attila Magyar
• Created: 16/Apr/19 10:49
• Updated: 29/Oct/22 16:15
• Resolved: 26/Aug/19 06:11

Description

GET /resources gives back the directory content of /var/lib/ambari-server/resources. The directory doesn't contain any sensitive information, only files which are already visible on github. But it might freak out security guys therefore it's best to disable the listing.

Issue Links

• relates to: AMBARI-25390 Ambari is indexing all subdirectories contents under /resources folder via API.
• links to: GitHub PR#3449
• links to: GitHub Pull Request #2936
• links to: GitHub Pull Request #2939