I noticed my apache system is delivering .htaccess files although it shouldn't, due to:
# The following lines prevent .htaccess and .htpasswd files from being # viewed by Web clients. # <Files ~ "^\.ht"> Order allow,deny Deny from all </Files>
which is the default Apache configuration. I have numerous virtual host below that. How can I find out why Apache still delivers .htaccess files?
Background: tried adding a Directory directive to block .svn folders and while wondering about why apache doesn't block them I came across that issue: It's not blocking anything at all, not even default .htaccess
mod_authz_host is loaded in /etc/apache2/mods-enabled/authz_host.load
LoadModule authz_host_module /usr/lib/apache2/modules/mod_authz_host.so