Your message dated Tue, 20 Sep 2011 09:57:07 +0200
with message-id <[email protected]>
and subject line Re: Bug#642185: remove Documentation.html symlink from
/usr/share/phpmyadmin
has caused the Debian Bug report #642185,
regarding remove Documentation.html symlink from /usr/share/phpmyadmin
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
642185: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642185
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: phpmyadmin
Version: 3.4.5-1
Documentation.html page of any phpMyAdmin installation discloses its version
number to any user. Meanwhile, most of the documentation contents are actually
useless for ordinary database users. I think you should consider removing it
from public access through HTTP server.
--- End Message ---
--- Begin Message ---
On Tue, September 20, 2011 03:55, Moonwalker wrote:
> Package: phpmyadmin
> Version: 3.4.5-1
>
> Documentation.html page of any phpMyAdmin installation discloses its
> version number to any user. Meanwhile, most of the documentation contents
> are actually useless for ordinary database users. I think you should
> consider removing it from public access through HTTP server.
On Debian, the version number of phpMyAdmin is known anyway:
http://packages.debian.org/phpmyadmin
I do not believe that knowledge of the version number provides a
significant advantage to attackers since they can easily and in an
automated fashion just try the known exploits. Further hiding it is only
beneficial for a misplaced feeling of security.
I think it's counter productive to remove documentation as long as it has
useful information.
Cheers,
Thijs
--- End Message ---
