How can one deny access to all subdirectories of a given directory? (While allowing to manually modify the access rights for single items in the directory tree.)
I tried to do it with the <Directory(Match)> directives. The server configuration (000-sites-enabled) looks like this:
DocumentRoot /var/www
<Directory /var/www>
Allow from all
Deny from none
Order deny,allow
</Directory>
<Directory /var/www/*>
Deny from all
</Directory>
A query to http://localhost/ successfully displays /var/www/index.html and all queries to any subdirectories fail.
The problem is: any query to a file in the httproot fails - i.e. requesting http://localhost/index.html will result into 403 Forbidden.
The <Directory(Match)> directives seem to actually match directories AND files!?
To see if this is true, i tried:
<Directory /var/www/i*>
Deny from all
</Directory>
This denies access only to files/directories starting with 'i'.
Is there a way to alter this behaviour and let <Directory> match only directories? Is there another way to accomplish that all the subdirectories are denied? (besides denying all of them manually or enabling all files manually)