[packages/stikked] disable access to config dir from web

glen glen at pld-linux.org
Sat Mar 15 19:51:06 CET 2014


commit 26bb12f2fa838c9074b9262a9c2fa52699764afc
Author: Elan Ruusamäe <glen at delfi.ee>
Date:   Sat Mar 15 20:50:37 2014 +0200

    disable access to config dir from web

 apache.conf | 12 ++++++++++++
 1 file changed, 12 insertions(+)
---
diff --git a/apache.conf b/apache.conf
index 8643b1a..d929a11 100644
--- a/apache.conf
+++ b/apache.conf
@@ -41,3 +41,15 @@ Alias /stikked /usr/share/stikked
 		ExpiresByType image/x-icon "access plus 1 year"
 	</IfModule>
 </Directory>
+
+<Directory /usr/share/stikked/application/config>
+    # Apache 2.x
+    <IfModule !mod_authz_core.c>
+        Order deny,allow
+        Deny from all
+    </IfModule>
+    # Apache 2.4
+    <IfModule mod_authz_core.c>
+        Require all denied
+    </IfModule>
+</Directory>
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/stikked.git/commitdiff/26bb12f2fa838c9074b9262a9c2fa52699764afc



More information about the pld-cvs-commit mailing list