move .ht* and *~ access control to common conf where rest of access is configured

[packages/apache.git] / apache-common.conf

diff --git a/apache-common.conf b/apache-common.conf
index 326dcff241ad1a754613701b8a36f1119b68ad3a..8b1b75185129ff759f12abd913c1715bf290d859 100644 (file)
--- a/apache-common.conf
+++ b/apache-common.conf
@@ -24,6 +24,28 @@ DocumentRoot "/home/services/httpd/html"
        </IfModule>
 </Directory>
 
+# Prevent .htaccess and .htpasswd files from being viewed by Web clients.
+<Files ".ht*">
+       <IfModule mod_authz_host.c>
+               Require all denied
+       </IfModule>
+       <IfModule mod_access_compat.c>
+               Order deny,allow
+               Deny from all
+       </IfModule>
+</Files>
+
+# Prevent backup files from being viewed, too.
+<Files "*~">
+       <IfModule mod_authz_host.c>
+               Require all denied
+       </IfModule>
+       <IfModule mod_access_compat.c>
+               Order deny,allow
+               Deny from all
+       </IfModule>
+</Files>
+
 #
 # This should be changed to whatever you set DocumentRoot to.
 #