Mailing List Archive: problems with in access.conf with 0.8.8 (fwd)

I think Andy mentioned this bug, can someone reply with a status
for this problem.

It's not on the known_bugs page.

Forwarded message:
> From marcs@worldgate.edmonton.ab.ca Wed Aug 16 19:31:40 1995
> Date: Wed, 16 Aug 1995 20:33:59 -0600 (MDT)
> From: Marc Slemko <marcs@worldgate.edmonton.ab.ca>
> Subject: problems with <Directory> in access.conf with 0.8.8
> To: apache-bugs@apache.org
> Message-ID: <Pine.3.89.9508162053.A28721-0100000@valis.worldgate.edmonton.ab.ca>
> MIME-Version: 1.0
> Content-Type: TEXT/PLAIN; charset=US-ASCII
>
> With 0.8.8 we are having trouble specifying restrictions for
> directories. A simple example:
>
> <Directory /usr/home/*>
> <Limit GET>
> deny from all
> </Limit>
> </Directory>
>
> In 0.6.5 and NCSA 1.3, this would work and prevent access to any files
> under /usr/home. In 0.8.8 it does not prevent access. I found this when
> I was trying to limit users from enabling server side includes. It seems
> to be a general problem with anything inside the <Directory> tags,
> although I haven't checked to see if all possible options are affected.
>
> I plugged in 0.6.5 and NCSA 1.3 using the same config files, and they
> both work properly.
>
> This is on a BSD/OS 2.0.1 server.
>

Try removing the "*" - since the limits are hierarchical, setting a Limit
on "every directory under /usr/home" is semantically the same as setting
a Limit on "the directory /usr/home". Right now Apache doesn't
understand wildcards in Directory directives, but that will get fixed
soon.

Brian

> Forwarded message:
> > From marcs@worldgate.edmonton.ab.ca Wed Aug 16 19:31:40 1995
> > Date: Wed, 16 Aug 1995 20:33:59 -0600 (MDT)
> > From: Marc Slemko <marcs@worldgate.edmonton.ab.ca>
> > Subject: problems with <Directory> in access.conf with 0.8.8
> > To: apache-bugs@apache.org
> > Message-ID: <Pine.3.89.9508162053.A28721-0100000@valis.worldgate.edmonton.ab.ca>
> > MIME-Version: 1.0
> > Content-Type: TEXT/PLAIN; charset=US-ASCII
> >
> > With 0.8.8 we are having trouble specifying restrictions for
> > directories. A simple example:
> >
> > <Directory /usr/home/*>
> > <Limit GET>
> > deny from all
> > </Limit>
> > </Directory>
> >
> > In 0.6.5 and NCSA 1.3, this would work and prevent access to any files
> > under /usr/home. In 0.8.8 it does not prevent access. I found this when
> > I was trying to limit users from enabling server side includes. It seems
> > to be a general problem with anything inside the <Directory> tags,
> > although I haven't checked to see if all possible options are affected.
> >
> > I plugged in 0.6.5 and NCSA 1.3 using the same config files, and they
> > both work properly.
> >
> > This is on a BSD/OS 2.0.1 server.
> >
>

--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
brian@organic.com brian@hyperreal.com http://www.[hyperreal,organic].com/