Bug 1034131 - adapt config for apache 2.4
Summary: adapt config for apache 2.4
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: glpi
Version: rawhide
Hardware: All
OS: Unspecified
unspecified
low
Target Milestone: ---
Assignee: Remi Collet
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-11-25 10:14 UTC by albert
Modified: 2013-11-25 10:27 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-11-25 10:27:05 UTC
Type: Bug


Attachments (Terms of Use)

Description albert 2013-11-25 10:14:01 UTC
Description of problem:

/etc/httpd/conf.d/glpi.conf still contain this:

<Directory /usr/share/glpi/config>
    Order Allow,Deny
    Deny from all
</Directory>
<Directory /usr/share/glpi/locales>
    Order Allow,Deny
    Deny from all
</Directory>
<Directory /usr/share/glpi/install/mysql>
    Order Allow,Deny
    Deny from all
</Directory>
<Directory /usr/share/glpi/scripts>
    Order Allow,Deny
    Deny from all
</Directory>

These ACL should be replaced with an apache 2.4 aware variant,
 <IfModule mod_authz_core.c>
     Require all denied
 </IfModule>
 <IfModule !mod_authz_core.c>
     Order Allow,Deny
     Deny from all
 </IfModule>

Version-Release number of selected component (if applicable):

glpi-0.84.3-1.fc21.noarch.rpm

(affects EPEL too)

Comment 1 Remi Collet 2013-11-25 10:27:05 UTC
Apache 2.4 provides mod_access_compat.c, so Order/Deny directive works (only to restrict right, not to allow right)

RHEL don't have Apache 2.4


Note You need to log in before you can comment on or make changes to this bug.