I have written this config for restrict access to
<VirtualHost *:80> ServerName example.com DocumentRoot /var/www/ <Directory /var/www/> Order deny,allow Allow from all Options FollowSymLinks </Directory> <Files /var/www/news.hmtl> Order allow,deny Deny from all </Files> </VirtualHost>
example.com/news.html still opens. I've solved this by explicit restrict access to URL
<Location /news.html> Order allow,deny Deny from all </Location>
It seems like all
<Files> rules are overriden by some implicit
<Location> when resolving URL to path relative DocumentRoot. Is it a true and I should think about DocumentRoot like about a place which proposed to be public visible?