Resolved Apache TraceEnable off

[Seba]

Following my security path before to submit the system to a penetration test I find that I should disable this feature in Apache

TraceEnable off

though I haven't found any article related to Plesk, where should I put this config? in the httpd.conf? or is something that Plesk has already implemented as a default?

What about Nginx?

 

[IgorG]

This option is there by default:

# grep -R TraceEnable /etc/httpd/*
/etc/httpd/conf/plesk.conf.d/server.conf:TraceEnable off

 

[Seba]

Thanks