Fedora 29 with HTTPD Apache 2.4
By default access to the server's directory system is protected by this entry in httpd.conf:
<Directory /> AllowOverride none Require all denied </Directory>
...and is overwritten on a per-directory basis with further
<directory> rules; so I have virtual host blocks as shown below and I would like to run a test to ensure that
<Directory "/"> is not allowing access outside of the DocumentRoot. How do I do this?
<VirtualHost insurgent.info:80> DocumentRoot "/var/httpd/insurgent" ServerName insurgent.info <Directory "/"> Require all granted Options Indexes FollowSymLinks IncludesNoExec AllowOverride None XBitHack Full </Directory> <Directory "/var/httpd/insurgent/.cgi-bin"> AllowOverride None Options None Require all granted </Directory> <IfModule alias_module> ScriptAlias /cgi-bin/ "/var/httpd/insurgent/.cgi-bin/" </IfModule> </VirtualHost>