diff --git a/jetty-webdefault.patch b/jetty-webdefault.patch
new file mode 100644
index 0000000..92379c2
--- /dev/null
+++ b/jetty-webdefault.patch
@@ -0,0 +1,24 @@
+diff -up ./etc/webdefault.xml.fix ./etc/webdefault.xml
+--- ./etc/webdefault.xml.fix	2009-05-20 17:05:52.000000000 -0400
++++ ./etc/webdefault.xml	2009-05-20 17:06:10.000000000 -0400
+@@ -96,7 +96,7 @@
+     </init-param>
+     <init-param>
+       <param-name>dirAllowed</param-name>
+-      <param-value>true</param-value>
++      <param-value>false</param-value>
+     </init-param>
+     <init-param>
+       <param-name>putAllowed</param-name>
+diff -up ./src/org/mortbay/jetty/servlet/webdefault.xml.fix ./src/org/mortbay/jetty/servlet/webdefault.xml
+--- ./src/org/mortbay/jetty/servlet/webdefault.xml.fix	2009-05-20 17:06:36.000000000 -0400
++++ ./src/org/mortbay/jetty/servlet/webdefault.xml	2009-05-20 17:06:47.000000000 -0400
+@@ -96,7 +96,7 @@
+     </init-param>
+     <init-param>
+       <param-name>dirAllowed</param-name>
+-      <param-value>true</param-value>
++      <param-value>false</param-value>
+     </init-param>
+     <init-param>
+       <param-name>putAllowed</param-name>
diff --git a/jetty.spec b/jetty.spec
index e2e5a45..6b02423 100644
--- a/jetty.spec
+++ b/jetty.spec
@@ -56,7 +56,7 @@
 
 Name:           jetty
 Version:        5.1.15
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        The Jetty Webserver and Servlet Container
 
 Group:          Applications/Internet
@@ -80,6 +80,7 @@ Patch0:         jetty-extra-j2ee-build_xml.patch
 Patch1:         jetty-PostFileFilter.patch
 Patch2:         jetty-libgcj-bad-serialization.patch
 Patch3:         jetty-TestRFC2616-libgcj-bad-date-parser.patch
+Patch4:		jetty-webdefault.patch
 Patch5:		jetty-unix.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
@@ -255,7 +256,7 @@ rm src/org/mortbay/util/jmx/MX4JHttpAdaptor.java
 %patch1 -b .sav
 %patch2 -b .sav
 %patch3 -b .sav
-
+%patch4
 %patch5
 
 # Delete this Sun specific file.
@@ -605,6 +606,9 @@ fi
 %endif
 
 %changelog
+* Thu May 21 2009 Jeff Johnston <jjohnstn@redhat.com> 5.1.15-3
+- Do not allow directory listings.
+
 * Tue May 19 2009 Jeff Johnston <jjohnstn@redhat.com> 5.1.15-2
 - Update OSGI manifest file.