From: Clinton Ebadi <clinton@unknownlamer.org>
Date: Sat, 23 May 2015 18:30:08 +0000 (-0400)
Subject: Block access to all filesystem paths by default
X-Git-Url: https://git.hcoop.net/hcoop/zz_old/debian/hcoop-apache2-config.git/commitdiff_plain/8cf7a4685ed41146fc734bdbb00d8e26e178783e?ds=sidebyside

Block access to all filesystem paths by default

Do not rely on the Debian base config to do this any more. We only
want to allow access to files in /afs.
---

diff --git a/files/conf.d/hcoop-security b/files/conf.d/hcoop-security
index b63a546..44328ea 100644
--- a/files/conf.d/hcoop-security
+++ b/files/conf.d/hcoop-security
@@ -1,3 +1,11 @@
+# Deny access to all paths by default
+
+<Directory />
+	AllowOverride None
+	Order Deny,Allow
+	Deny from all
+</Directory>
+
 # Permit Mapping directories from afs (it is readable by the entire
 # world as it is)
 
@@ -5,4 +13,4 @@
 	AllowOverride None
 	Order Deny,Allow
 	Allow from all
-</Directory>
\ No newline at end of file
+</Directory>