From: David Shane Holden <dpejesh@apache.org>
Date: Fri, 11 Jul 2008 21:59:59 +0000 (+0000)
Subject: Add 'AuthzMergeRules Off' and a note to the default httpd.conf.
X-Git-Tag: 2.3.0~428
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=201cc0e2db257b77bbba3425e31e8e891fd4481a;p=apache

Add 'AuthzMergeRules Off' and a note to the default httpd.conf.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@676091 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/docs/conf/httpd.conf.in b/docs/conf/httpd.conf.in
index ef3f3adefe..1da6390bb1 100644
--- a/docs/conf/httpd.conf.in
+++ b/docs/conf/httpd.conf.in
@@ -155,6 +155,16 @@ DocumentRoot "@exp_htdocsdir@"
     #
     Require all granted
 
+    #
+    # <Directory> and <Location> directives inherit their parent's authorization
+    # rules and applies them using AND logic instead of the previous OR logic of
+    # Apache 2.2 and before.  To disable the merging of these rules use
+    # "AuthzMergeRules Off".
+    #
+    # This prevents the "Require all denied" rule in "<Directory />" above
+    # from being included in this directory's configuration.
+    #
+    AuthzMergeRules Off
 </Directory>
 
 #