Allow Access to Bash_History

[matheusdss]

Hello,

I’m with the pydio server normally. However, when performing the vulnerability scan, I realized that it is possible to access the server’s command history.

Access URL: https: // /.bash_history

How do I block this page?

I’m using a CentOS server

[c12simple]

Hello,

Interesting. Could you please inbox me the detail.

To block this page, please:

• Install and config correctly the rewrite module (with .htaccess at the root of pydio folder)
• Activate selinux (https://pydio.com/en/docs/kb/pydio-8/pydio-security-enhanced-linux-selinux)