general/294: htaccess searched for in weird places

[Valtteri Vuorikoski <vu...@sci.fi>]

>Number:         294
>Category:       general
>Synopsis:       htaccess searched for in weird places
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache (Apache HTTP Project)
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Tue Apr  1 06:10:01 1997
>Originator:     vuori@sci.fi
>Organization:
apache
>Release:        1.2b7
>Environment:
SunOS k 5.5 Generic_103093-08 sun4m sparc SUNW,SPARCclassic
gcc 2.7.2
>Description:
If a directory has a Location directive for it in access conf (perhaps
even without it), .htaccess will be searched starting from the root directory
upward toward apache's directory. With a Directory directive, the correct thing
happens. Using truss, I could see that the httpd was looking for .htaccess
as follows: /.htaccess, /opt/.htaccess, /opt/local/.htaccess and
/opt/local/apache/.htaccess
While I might've been doing the Wrong Thing with Location, I still don't think
the server should attempt to poke at files in /.
>How-To-Repeat:
Create a directory under htdocs, put in a Location directive for it,
attempt to use .htaccess in at directory, truss the server, see it dtwt.
>Fix:
N
>Audit-Trail:
>Unformatted: