You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Rob Hartill <ha...@hyperreal.com> on 1995/08/17 21:39:41 UTC
problems with in access.conf with 0.8.8 (fwd)
I think Andy mentioned this bug, can someone reply with a status
for this problem.
It's not on the known_bugs page.
Forwarded message:
> From marcs@worldgate.edmonton.ab.ca Wed Aug 16 19:31:40 1995
> Date: Wed, 16 Aug 1995 20:33:59 -0600 (MDT)
> From: Marc Slemko <ma...@worldgate.edmonton.ab.ca>
> Subject: problems with <Directory> in access.conf with 0.8.8
> To: apache-bugs@apache.org
> Message-ID: <Pi...@valis.worldgate.edmonton.ab.ca>
> MIME-Version: 1.0
> Content-Type: TEXT/PLAIN; charset=US-ASCII
>
> With 0.8.8 we are having trouble specifying restrictions for
> directories. A simple example:
>
> <Directory /usr/home/*>
> <Limit GET>
> deny from all
> </Limit>
> </Directory>
>
> In 0.6.5 and NCSA 1.3, this would work and prevent access to any files
> under /usr/home. In 0.8.8 it does not prevent access. I found this when
> I was trying to limit users from enabling server side includes. It seems
> to be a general problem with anything inside the <Directory> tags,
> although I haven't checked to see if all possible options are affected.
>
> I plugged in 0.6.5 and NCSA 1.3 using the same config files, and they
> both work properly.
>
> This is on a BSD/OS 2.0.1 server.
>
Re: problems with in access.conf with 0.8.8 (fwd)
Posted by Brian Behlendorf <br...@organic.com>.
Try removing the "*" - since the limits are hierarchical, setting a Limit
on "every directory under /usr/home" is semantically the same as setting
a Limit on "the directory /usr/home". Right now Apache doesn't
understand wildcards in Directory directives, but that will get fixed
soon.
Brian
> Forwarded message:
> > From marcs@worldgate.edmonton.ab.ca Wed Aug 16 19:31:40 1995
> > Date: Wed, 16 Aug 1995 20:33:59 -0600 (MDT)
> > From: Marc Slemko <ma...@worldgate.edmonton.ab.ca>
> > Subject: problems with <Directory> in access.conf with 0.8.8
> > To: apache-bugs@apache.org
> > Message-ID: <Pi...@valis.worldgate.edmonton.ab.ca>
> > MIME-Version: 1.0
> > Content-Type: TEXT/PLAIN; charset=US-ASCII
> >
> > With 0.8.8 we are having trouble specifying restrictions for
> > directories. A simple example:
> >
> > <Directory /usr/home/*>
> > <Limit GET>
> > deny from all
> > </Limit>
> > </Directory>
> >
> > In 0.6.5 and NCSA 1.3, this would work and prevent access to any files
> > under /usr/home. In 0.8.8 it does not prevent access. I found this when
> > I was trying to limit users from enabling server side includes. It seems
> > to be a general problem with anything inside the <Directory> tags,
> > although I haven't checked to see if all possible options are affected.
> >
> > I plugged in 0.6.5 and NCSA 1.3 using the same config files, and they
> > both work properly.
> >
> > This is on a BSD/OS 2.0.1 server.
> >
>
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
brian@organic.com brian@hyperreal.com http://www.[hyperreal,organic].com/