Bug 1034131

Summary: adapt config for apache 2.4
Product: [Fedora] Fedora Reporter: albert <superber>
Component: glpiAssignee: Remi Collet <fedora>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: rawhideCC: fedora
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-11-25 10:27:05 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description albert 2013-11-25 10:14:01 UTC 
Description of problem:

/etc/httpd/conf.d/glpi.conf still contain this:

<Directory /usr/share/glpi/config>
    Order Allow,Deny
    Deny from all
</Directory>
<Directory /usr/share/glpi/locales>
    Order Allow,Deny
    Deny from all
</Directory>
<Directory /usr/share/glpi/install/mysql>
    Order Allow,Deny
    Deny from all
</Directory>
<Directory /usr/share/glpi/scripts>
    Order Allow,Deny
    Deny from all
</Directory>

These ACL should be replaced with an apache 2.4 aware variant,
 <IfModule mod_authz_core.c>
     Require all denied
 </IfModule>
 <IfModule !mod_authz_core.c>
     Order Allow,Deny
     Deny from all
 </IfModule>

Version-Release number of selected component (if applicable):

glpi-0.84.3-1.fc21.noarch.rpm

(affects EPEL too)
Comment 1 Remi Collet 2013-11-25 10:27:05 UTC 
Apache 2.4 provides mod_access_compat.c, so Order/Deny directive works (only to restrict right, not to allow right)

RHEL don't have Apache 2.4