[packages/stikked] disable access to config dir from web
glen
glen at pld-linux.org
Sat Mar 15 19:51:06 CET 2014
commit 26bb12f2fa838c9074b9262a9c2fa52699764afc
Author: Elan Ruusamäe <glen at delfi.ee>
Date: Sat Mar 15 20:50:37 2014 +0200
disable access to config dir from web
apache.conf | 12 ++++++++++++
1 file changed, 12 insertions(+)
---
diff --git a/apache.conf b/apache.conf
index 8643b1a..d929a11 100644
--- a/apache.conf
+++ b/apache.conf
@@ -41,3 +41,15 @@ Alias /stikked /usr/share/stikked
ExpiresByType image/x-icon "access plus 1 year"
</IfModule>
</Directory>
+
+<Directory /usr/share/stikked/application/config>
+ # Apache 2.x
+ <IfModule !mod_authz_core.c>
+ Order deny,allow
+ Deny from all
+ </IfModule>
+ # Apache 2.4
+ <IfModule mod_authz_core.c>
+ Require all denied
+ </IfModule>
+</Directory>
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/stikked.git/commitdiff/26bb12f2fa838c9074b9262a9c2fa52699764afc
More information about the pld-cvs-commit
mailing list