[Pkg-roundcube-maintainers] Bug#476162: conf.d/roundcube shouldn't contain any Alias entries

[Vincent Bernat]

tags 476162 + confirmed pending
thanks

OoO En ce  début de soirée du lundi 14 avril  2008, vers 21:05, Roderick
Schertler <roderick at argon.org> disait:

> The Apache configuration snippet in /etc/apache2/conf.d/roundcube is
> loaded by the server outside of any virtual host definition, so it
> applies to all viertual hosts.  This means that the 

>     Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/

> there applies to all virtual hosts, and so that path allows access to
> that directory from all your virtual hosts.

> Just a few lines down from there is this entry:

>     # This alias does not work properly with several hosts on your apache server
>     # Uncomment it to use it
>     #    Alias /roundcube /var/lib/roundcube

> The tiny_mce Alias should similarly be commented out by default.

Hi Roderick!

The Alias was left uncommented  because, contrary to /roundcube, it does
not  give  access  to  anything  meaningful (something  that  should  be
protected  by  password  for  example)  since  it is  just  a  bunch  of
javascript  files. Moreover,  the  path  is too  specific  to shadow  an
existing path.

However, to be  consistent with /roundcube alias, this  will be fixed in
the next upload.

Thanks for your report.
-- 
printk(KERN_WARNING "Warning: defective CD-ROM (volume sequence
number). Enabling \"cruft\" mount option.\n");
	2.2.16 /usr/src/linux/fs/isofs/inode.c
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 188 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-roundcube-maintainers/attachments/20080415/59a06eee/attachment.pgp