Package: viewcvs
Severity: important

The ViewCVS package requires that /doc/viewcvs be aliased by Apache to
/usr/share/viewcvs, and even attempts to supply a conf.d to achieve
this.

However, it is policy (11.5) that /doc/* directories refer to those from
/usr/share/doc/* on the local system, and the default apache
configuration prevents access to /doc/ from anywhere except the
localhost by default.

As a result, there are 2 issues:

1. /doc/viewcvs no longer refers to the documentation in
/usr/share/doc/viewcvs as per policy for /doc/
2. clients other than the localhost cannot load any data from
/doc/viewcvs, resulting in missing images on pages.

These issues should probably be corrected by moving any actual
documentation from /usr/share/viewcvs to /usr/share/doc/viewcvs, and
only leaving shared data required by the cgi (eg. images?) in
/usr/share/viewcvs, which should then be made available using a
different alias, such as /viewcvs.

Cheers,
chris

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (900, 'testing'), (800, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11.6-ck3
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to