Linux Server Configuration

$ grep ErrorDocument /etc/apache2/apache2.conf

• 
  By default, the server writes the transfer log to the file /var/log/apache2/access.log. You can change this on a per-site basis in your virtual host configuration files with the CustomLog directive, or omit it to accept the default, specified in /etc/apache2/apache2.conf. You may also specify the file to which errors are logged, via the ErrorLog directive, whose default is /var/log/apache2/error.log. These are kept separate from the transfer logs to aid in troubleshooting problems with your Apache2 server. You may also specify the LogLevel (the default value is "warn") and the LogFormat (see /etc/apache2/apache2.conf for the default value).
  
• 
  Some options are specified on a per-directory basis rather than per-server. Options is one of these directives. A Directory stanza is enclosed in XML-like tags, like so:
  

...

The Options directive within a Directory stanza accepts one or more of the following values (among others), separated by spaces:

• 
  ExecCGI - Allow execution of CGI scripts. CGI scripts are not executed if this option is not chosen.
  

  Most files should not be executed as CGI scripts. This would be very dangerous. CGI scripts should kept in a directory separate from and outside your DocumentRoot, and only this directory should have the ExecCGI option set. This is the default, and the default location for CGI scripts is /usr/lib/cgi-bin.

• 
  Includes - Allow server-side includes. Server-side includes allow an HTML file to include other files. This is not a common option.
  
• 
  IncludesNOEXEC - Allow server-side includes, but disable the #exec and #include commands in CGI scripts.
  
• 
  Indexes - Display a formatted list of the directory's contents, if no DirectoryIndex (such as index.html) exists in the requested directory.
  

For security reasons, this should usually not be set, and certainly should not be set on your DocumentRoot directory. Enable this option carefully on a per-directory basis only if you are certain you want users to see the entire contents of the directory.

•