Bug 457937 - Add htaccess files for Bugzilla to the rpm package so they are installed automatically
Summary: Add htaccess files for Bugzilla to the rpm package so they are installed auto...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Bugzilla
Classification: Community
Component: Administration
Version: 3.6
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Jeff Fearn 🐞
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-08-05 16:20 UTC by David Lawrence
Modified: 2013-06-24 04:09 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-05-30 05:23:32 UTC
Embargoed:


Attachments (Terms of Use)

Description David Lawrence 2008-08-05 16:20:46 UTC
Add htaccess files for Bugzilla to the rpm package so they are installed automatically

/var/www/html/bugzilla/.htaccess

# Don't allow people to retrieve non-cgi executable files or our private data
<FilesMatch ^(.*\.pm|.*\.pl|.*localconfig.*)$>
  deny from all
</FilesMatch>

/var/www/html/bugzilla/data/.htaccess

# Nothing in this directory is retrievable unless overridden by an .htaccess
# in a subdirectory; the only exception is duplicates.rdf, which is used by
# duplicates.xul and must be accessible from the web server
deny from all
<Files duplicates.rdf>
  allow from all
</Files>

Comment 1 David Lawrence 2008-11-24 20:48:59 UTC
Normally these are done by the checksetup.pl script which we cannot run in our production environments so we need to make sure they are included in the rpm package so that they are installed automatically.

Comment 2 David Lawrence 2010-01-15 17:33:21 UTC
Red Hat Bugzilla is now using version 3.4 of the Bugzilla codebase and
therefore this feature will need to be implemented against the new release.
Updating bug version to 3.2.

Comment 3 David Lawrence 2010-08-25 21:44:02 UTC
Red Hat has now upgraded to Bugzilla 3.6 and this bug will now be reassigned to that version. It would be helpful to the Bugzilla Development Team if this bug is verified to still be an issue with the latest version. If it is no longer an issue, then feel free to close, otherwise please comment that it is still a problem and we will try to address the issue as soon as we can.

Thanks
Bugzilla Development Team

Comment 6 Jeff Fearn 🐞 2012-05-30 04:47:56 UTC
As part of the recent Bugzilla 2.4 upgrade the Bugzilla team are cleaning up bugs opened against old versions of Bugzilla. This bug has been flagged as an old bug and will be CLOSED WONTFIX in 7 days time.

If you believe this bug is an issue in the latest Bugzilla version please comment on this bug within 7 days. Doing so will ensure this bug is not closed automatically.

Thanks, the Bugzilla team.


Note You need to log in before you can comment on or make changes to this bug.