mirror of
https://git.dpkg.org/git/dpkg/dpkg-www.git
synced 2025-04-04 16:05:29 +00:00
39 lines
1.4 KiB
Plaintext
39 lines
1.4 KiB
Plaintext
dpkg-www for Debian
|
|
-------------------
|
|
|
|
Web based Debian package browser.
|
|
|
|
With this CGI program you can browse Debian packages using a web browser.
|
|
You can easily follow package dependencies and browse package documentation
|
|
with a mouse click.
|
|
|
|
If you have properly configured the package you can also query which packages
|
|
own a non-installed file or have a certain value in a control field.
|
|
|
|
You can even install or remove packages from your browser if this feature is
|
|
enabled in the site configuration file.
|
|
|
|
WARNING!
|
|
Allowing access to /cgi-bin/dpkg from any foreign host could allow a
|
|
malicious external user to know your installed packages and try possible
|
|
security exploits. You should therefore disable access to dpkg-www from
|
|
foreign hosts. With apache you should add a file with the following
|
|
instructions into apache conf-available directory:
|
|
|
|
# Disable execution of dpkg from remote hosts
|
|
<Location /cgi-bin/dpkg>
|
|
require local
|
|
# require ip 192.168.0
|
|
</Location>
|
|
|
|
The dpkg-www installation script will automatically install a default
|
|
configuration file in /etc/apache2/conf-available/. If you are using a
|
|
different httpd server you should make the appropriate changes in the
|
|
proper httpd config file.
|
|
|
|
Enabling the web installation feature could potentially introduce
|
|
security holes in your system and your network. Use at yout own risk!
|
|
|
|
--
|
|
Jean-Michel Nirgal Vourgère <jmv_deb@nirgal.com> Thu, 26 Mar 2015 11:57:16 +0100
|