> While better out-of-the-box behavior and defaults is
> an ongoing
> improvement process, if you have concrete examples to
> share that would
> be helpful as well.

Here is a wonderful example summing up pretty much waht's wrong:
<Directory />
    Options FollowSymLinks
    AllowOverride None
    Order deny,allow
    Deny from all
</Directory>

AllowOverride None, is yet another wonderful example on itself, as 
AllowOverride defaults to "All".


It should not be necessary to have

Listen 80

That should be default, and you should only have to specify a Listen statement, 
when you want it to be different.

Yet another wonderful example is the extra/httpd-default.conf . Half of it is 
too verbose, setting values which are default anyways: Timeout, keepalive, 
MaxKeepAliveRequests, AccessFileName, ServerTokens, HostnameLookups.
While the other half sets the values to more or less sane defaults: more: 
KeepAliveTimeout and HostnameLookups; and less: ServerTokens and 
ServerSignature.

Those are only a few of the examples, I hope they clarify in which direction I 
was heading.

So long,
Igor
-- 
This message posted from opensolaris.org

Reply via email to