Whoops, I effectively got the version number and Ubuntu release wrong, because I missed that we are still using a Dapper-derived lighttpd.conf on our Hardy machines. (My apologies for the confusion; I should have checked to be sure.)
The dapper lighttpd.conf says: $HTTP["host"] == "localhost" { global { alias.url += ( "/doc/" => "/usr/share/doc/", "/images/" => "/usr/share/images/" ) } dir-listing.activate = "enable" } This is from the current lighttpd_1.4.11-3ubuntu3.8_i386.deb package for dapper (6.06 LTS). Arguably this is still not a bug because the config file also binds lighttpd only to localhost. But it doesn't match the comment, and it's dangerous if you change that to let lighttpd talk to the world without knowing that you need to change other things in the configuration. -- lighttpd makes /usr/share/doc visible to everyone https://bugs.launchpad.net/bugs/406957 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs