I did an install of the current version of OCS ng and found that the default install allows for directory listings. If I change the url and append /config for instance I can view all the files in there. Is this something that I need to fix as an administrator of my own system or should the default install of OCS NG by default block directory listings?
Is there any reason to leave directory listing enabled?
The only config I see for this is here for download:
<Directory /var/lib/ocsinventory-reports/download>
#Options Indexes FollowSymLinks MultiView
AllowOverride None
Order allow,deny
allow from all
</Directory>
Should I create a new Directory config for the rest of the site? Will it break anything for the agents?
