[Pkg-nagios-devel] Bug#679340: icinga-web: .htaccess files should possibly be config files

[Christoph Anton Mitterer]

Package: icinga-web
Version: 1.7.1-1
Severity: wishlist


Hi.

There are two .htaccess files shipped with icinga-web that
are in:
/usr/share/icinga-web/pub/soap/.htaccess
/usr/share/icinga-web/pub/.htaccess

I have not yet found out, wheter they are really needed to be activated
(do you have an idea possibly?) but I'd wish for them to go to
/etc/icinga-web and be marked as config files.

Mainly two reasons:

- Automatically including some webserver config which the
  user possibly never notices is quite a dangerous thing.
  It may easliy break the whole security concept of the
  webserver config.
  By placing these files as config files, everything still works out
  of the box, but they are now the responsibility of the user and
  he will note config file changes on updates.

- Right now there is the /icinga-web URI path hardcoded in these files
  for the rewrite rules.
  Which basically makes it impossible to change the icinga-web path.


Change should be simple imho, and things should still work out of the
box for the average users.
But it would fulful more of Debians aim to be the "universal OS". ;-)


Cheers,
Chris.