I want to better understand the use case. Wordpress installs its .htaccess files: why does it not specify that option?
Is required to make WP work?
BTW, our current defaults for virtual hosts configuration seem to be different from Apache default. Maybe WP has a different expectation?
[root@nethserver ~]# cat /etc/e-smith/templates/httpd/vhost-extra/30directory20options
Options None
Options +Indexes
Options +Includes
According to Apache docs, the default Options
directive value is
The default was changed from All to FollowSymlinks in 2.3.11
The Apache core docs says
[FollowSymLinks, SymLinksIfOwnerMatch] Omitting this option should not be considered a security restriction, since symlink testing is subject to race conditions that make it circumventable.
…It could be safe (enough) to change our default vhost configuration to include FollowSymLinks
. What do you think?