- make default config safe wrt mod_access_compat

diff --git a/apache-common.conf b/apache-common.conf
index 8643668fb619b8f4be48370700fdfde7c44569d0..326dcff241ad1a754613701b8a36f1119b68ad3a 100644 (file)
--- a/apache-common.conf
+++ b/apache-common.conf
@@ -18,6 +18,10 @@ DocumentRoot "/home/services/httpd/html"
        <IfModule mod_authz_host.c>
                Require all denied
        </IfModule>
+       <IfModule mod_access_compat.c>
+               Order deny,allow
+               Deny from all
+       </IfModule>
 </Directory>
 
 #
@@ -51,5 +55,9 @@ DocumentRoot "/home/services/httpd/html"
        <IfModule mod_authz_host.c>
                Require all granted
        </IfModule>
+       <IfModule mod_access_compat.c>
+               Order allow,deny
+               Allow from all
+       </IfModule>
 
 </Directory>

diff --git a/apache-httpd.conf b/apache-httpd.conf
index 28199f7fd7a4861baf92015000102ffe5fb0f1a6..eaec1ea171a99b537610535d5b942170bc21d310 100644 (file)
--- a/apache-httpd.conf
+++ b/apache-httpd.conf
@@ -103,6 +103,10 @@ IncludeOptional webapps.d/*.conf
                <IfModule mod_authz_host.c>
                        Require all granted
                </IfModule>
+               <IfModule mod_access_compat.c>
+                       Order allow,deny
+                       Allow from all
+               </IfModule>
        </Directory>
 </IfModule>
 

diff --git a/apache-manual.conf b/apache-manual.conf
index 709d97f229366b73af61399d5b8037614647ffb2..1ccd95f65fdbea29247e32f9fc6ebf88e22f20ac 100644 (file)
--- a/apache-manual.conf
+++ b/apache-manual.conf
@@ -14,6 +14,10 @@ AliasMatch ^/manual(?:/(?:da|de|en|es|fr|ja|ko|pt-br|ru|tr|zh-cn))?(/.*)?$ "/hom
        Options Indexes
        AllowOverride None
        Require all granted
+       <IfModule mod_access_compat.c>
+               Order allow,deny
+               Allow from all
+       </IfModule>
 
        <Files *.html>
                SetHandler type-map

diff --git a/apache-mod_authz_host.conf b/apache-mod_authz_host.conf
index 679203500d45df15ac23fa2637568478cb369bc1..53919673291e38ec73629b94c7fab2aeefe3e3f7 100644 (file)
--- a/apache-mod_authz_host.conf
+++ b/apache-mod_authz_host.conf
@@ -6,5 +6,9 @@ LoadModule authz_host_module modules/mod_authz_host.so
 <IfModule authz_host_module>
        <FilesMatch "^\.ht">
                Require all denied
+               <IfModule mod_access_compat.c>
+                       Order allow,deny
+                       Allow from all
+               </IfModule>
        </FilesMatch>
 </IfModule>

diff --git a/apache-mod_autoindex.conf b/apache-mod_autoindex.conf
index 7b902c63842fd8efd76238915e6a0b9fe1134220..b9c6ec19f65fb1c3d840a3a726a837e153a0a1d9 100644 (file)
--- a/apache-mod_autoindex.conf
+++ b/apache-mod_autoindex.conf
@@ -27,6 +27,10 @@ Alias /icons/ "/home/services/httpd/icons/"
        <IfModule mod_authz_host.c>
                Require all granted
        </IfModule>
+       <IfModule mod_access_compat.c>
+               Order allow,deny
+               Allow from all
+       </IfModule>
 </Directory>
 
 #

diff --git a/apache-mod_info.conf b/apache-mod_info.conf
index 9ba6d7a008bd4182d6acb5acad5d313dec5d2cd5..4dca4805d224afdd37614ad65620524dfef93021 100644 (file)
--- a/apache-mod_info.conf
+++ b/apache-mod_info.conf
@@ -16,6 +16,11 @@ LoadModule info_module               modules/mod_info.so
        # Require host .example.com
        # Require ip 127
        Require local
+       <IfModule mod_access_compat.c>
+               Order deny,allow
+               Deny from all
+               Allow from 127.0.0.1
+       </IfModule>
 </Location>
 
 </IfModule>

diff --git a/apache-mod_proxy.conf b/apache-mod_proxy.conf
index 757379af835d81c2dffbb16d397713876f1789aa..041772e33b539e67326551509f4b2e3ae15e657f 100644 (file)
--- a/apache-mod_proxy.conf
+++ b/apache-mod_proxy.conf
@@ -30,6 +30,11 @@ ProxyRequests On
 <Proxy *>
        Require all denied
 #      Require host .your-domain.com
+       <IfModule mod_access_compat.c>
+               Order deny,allow
+               Deny from all
+#              Allow from .your-domain.com
+       </IfModule>
 </Proxy>
 
 # enable local fcgi proxy request, e.x for php-fpm

diff --git a/apache-mod_status.conf b/apache-mod_status.conf
index a5fd90b9bb65eccb6f680de00989d4d0f52b2c9a..6477a232966684203ebd6772a6030b24b6c9a917 100644 (file)
--- a/apache-mod_status.conf
+++ b/apache-mod_status.conf
@@ -17,6 +17,11 @@ LoadModule status_module             modules/mod_status.so
        # Require host .example.com
        # Require ip 127
        Require local
+       <IfModule mod_access_compat.c>
+               Order deny,allow
+               Deny from all
+               Allow from 127.0.0.1
+       </IfModule>
 </Location>
 
 #

diff --git a/apache-mod_userdir.conf b/apache-mod_userdir.conf
index 1bcff5d78509fd0ae568e89cfb9a28c215078711..3b6fd290acc97e43a7f77612057b429af0d1d594 100644 (file)
--- a/apache-mod_userdir.conf
+++ b/apache-mod_userdir.conf
@@ -21,9 +21,17 @@ UserDir public_html
        Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
        <Limit GET POST OPTIONS>
                Require all granted
+               <IfModule mod_access_compat.c>
+                       Order allow,deny
+                       Allow from all
+               </IfModule>
        </Limit>
        <LimitExcept GET POST OPTIONS>
                Require all denied
+               <IfModule mod_access_compat.c>
+                       Order deny,allow
+                       Deny from all
+               </IfModule>
        </LimitExcept>
        #<IfModule mod_php.c>
        #       php_admin_value open_basedir "/home/users:/usr/share/pear:/usr/share/php:/tmp"

diff --git a/apache-multilang-errordoc.conf b/apache-multilang-errordoc.conf
index 0cc6af5427ba5e1b7acd61b2b857d714d148c0cc..b4bf2a350a605b9e948f80d85a5bd7bda246fb0d 100644 (file)
--- a/apache-multilang-errordoc.conf
+++ b/apache-multilang-errordoc.conf
@@ -27,6 +27,10 @@ Alias /error/ "/home/services/httpd/error/"
        AddOutputFilter Includes html
        AddHandler type-map var
        Require all granted
+       <IfModule mod_access_compat.c>
+               Order allow,deny
+               Allow from all
+       </IfModule>
        LanguagePriority en cs de es fr it ja ko nl pl pt-br ro sv tr
        ForceLanguagePriority Prefer Fallback
 </Directory>