Bug#23661: Security issue when accessing documentation through an http server

Joey Hess <[EMAIL PROTECTED]> wrote: > Martin Stjernholm wrote: > > Section 4.4 item 2 in the Debian Policy Manual implies that /usr/doc > > should be made accessible by a web server. It's not mentioned there > > that it would introduce a security weakness if

Bug#23661: Security issue when accessing documentation through an http server

Package: debian-policy Version: 2.4.1.1 Severity: important Section 4.4 item 2 in the Debian Policy Manual implies that /usr/doc should be made accessible by a web server. It's not mentioned there that it would introduce a security weakness if access to those files isn't restricted to localhost. A