TEST-FAILED Webserver is permitting fetch of localconfig

While running the testserver.pl in bugzilla root folder, following error message occurred.  “TEST-FAILED Webserver is permitting fetch of localconfig”

Error Message:

 #./testserver.pl http://bugzillaserver
TEST-OK Webserver is running under group id in $webservergroup.
TEST-OK Got padlock picture.
TEST-OK Webserver is executing CGIs via mod_cgi.
TEST-FAILED Webserver is permitting fetch of http://bugzillaserver/localconfig.

Solution:

Add the following lines inside </VirtualHost> in your Apache Web Server config file(httpd.conf)

<FilesMatch ^(.*.pm|.*.pl|.*localconfig.*)$>
  deny from all
</FilesMatch>

Sample Bugzilla Apache Config:

 <VirtualHost server_ip:*>
 DocumentRoot /var/www/html/bugzilla
 ServerName bug.bugzilla.com
 RewriteEngine on
 RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
 RewriteRule .* - [F]
 IndexOptions SuppressColumnSorting SuppressDescription SuppressHTMLPreamble SuppressLastModified SuppressSize SuppressIcon SuppressRules
 Options +ExecCGI
 <Directory "/var/www/html/bugzilla">
 AddHandler cgi-script .cgi
 Options -Indexes +ExecCGI
 DirectoryIndex index.cgi
 AllowOverride Limit
 </Directory>
 <FilesMatch ^(.*.pm|.*.pl|.*localconfig.*)$>
 deny from all
 </FilesMatch>
 <IfModule mod_expires.c>
 <IfModule mod_headers.c>
 <IfModule mod_env.c>
 <FilesMatch (.js|.css)$>
 ExpiresActive On
 ExpiresDefault "now plus 1 years"
 Header append Cache-Control "public"
 </FilesMatch>
 SetEnv BZ_CACHE_CONTROL 1
 </IfModule>
 </IfModule>
 </IfModule>
 </VirtualHost>

 

Leave a Reply

Your email address will not be published. Required fields are marked *