RequireAll overwrite authorization configuration in Files sections in Apache Httpd
Issue
- I have following configuration in Apache httpd and found that
RequireAllconfiguration insideLocationdirective overwrite authorization configuration inFilessections in Apache. i.e. Access ofhttp://192.168.1.1/.htaccessis successful. Even access to.htaccessfile is denied as perFilessection configuration.
<Files ".ht*">
Require all denied
</Files>
<VirtualHost 192.168.1.1:80>
ServerName 192.168.1.1
<Location />
<RequireAll>
Require all granted
Require not ip 127.0.0.1
</RequireAll>
</Location>
</VirtualHost>
Environment
- Red Hat Enterprise Linux 7
- Apache httpd 2.4.6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.