>Number:         3454
>Category:       mod_access
>Synopsis:       AllowOverride Limit ignored for regex <Directory ~> in 
>access.conf
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Thu Nov 26 07:10:00 PST 1998
>Last-Modified:
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        1.3.3
>Environment:
FreeBSD 2.2-STABLE (RELENG_2_2)
gcc -O -pipe -fomit-frame-pointer
>Description:
In access.conf, if I wrap the following in <Directory 
"/home/project/web-docs/">, .htaccess Limit is enforced. If the following is 
wrapped in <Directory ~ "/home/.*/web-docs/">, .htaccess Limit is not enforced:

Options Indexes FollowSymLinks Includes
AllowOverride AuthConfig Limit

The access.conf's <Directory /> sets a more restrictive ``AllowOverride None''.

This looks like an incomplete implimentation of the new regexp matching code 
for <Directory> and <Location> directives.
>How-To-Repeat:
Try to use a regexp <Directory ~> directive to AllowOverride so that .htaccess 
<Limit>s are enforced in homedirs.
>Fix:
This may be a symptom of the same problem causing the likes of PR1829. I 
suspect it may also be the cause of the problem reported in PR3019.
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.                                      ]
[Reply only with text; DO NOT SEND ATTACHMENTS!         ]



Reply via email to