From 8cf7a4685ed41146fc734bdbb00d8e26e178783e Mon Sep 17 00:00:00 2001
From: Clinton Ebadi <clinton@unknownlamer.org>
Date: Sat, 23 May 2015 14:30:08 -0400
Subject: [PATCH] Block access to all filesystem paths by default

Do not rely on the Debian base config to do this any more. We only
want to allow access to files in /afs.
---
 files/conf.d/hcoop-security | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/files/conf.d/hcoop-security b/files/conf.d/hcoop-security
index b63a546..44328ea 100644
--- a/files/conf.d/hcoop-security
+++ b/files/conf.d/hcoop-security
@@ -1,3 +1,11 @@
+# Deny access to all paths by default
+
+<Directory />
+	AllowOverride None
+	Order Deny,Allow
+	Deny from all
+</Directory>
+
 # Permit Mapping directories from afs (it is readable by the entire
 # world as it is)
 
@@ -5,4 +13,4 @@
 	AllowOverride None
 	Order Deny,Allow
 	Allow from all
-</Directory>
\ No newline at end of file
+</Directory>
-- 
2.20.1