summaryrefslogtreecommitdiffstats
path: root/tags/w/web-application-depends-on-apache2-data-package.tag
diff options
context:
space:
mode:
Diffstat (limited to 'tags/w/web-application-depends-on-apache2-data-package.tag')
-rw-r--r--tags/w/web-application-depends-on-apache2-data-package.tag10
1 files changed, 10 insertions, 0 deletions
diff --git a/tags/w/web-application-depends-on-apache2-data-package.tag b/tags/w/web-application-depends-on-apache2-data-package.tag
new file mode 100644
index 0000000..31d9125
--- /dev/null
+++ b/tags/w/web-application-depends-on-apache2-data-package.tag
@@ -0,0 +1,10 @@
+Tag: web-application-depends-on-apache2-data-package
+Severity: warning
+Check: apache2
+Explanation: The package appears to be a web application but declares a package
+ relation with <code>apache2-bin</code>, <code>apache2-data</code> or any of its
+ transitional packages. However, web applications are rarely bound to a specific
+ web server version. Thus, they should depend on <code>apache2</code> only instead.
+ If a web application is actually tied to a particular binary version of the web
+ server a dependency against the virtual <code>apache2-api-YYYYMMDD</code> package
+ is more appropriate.