Comment 8 for bug 1447675

Since the directory listing only shows packaged files and does not contains any private files I suggest a class D type of bug (http://security.openstack.org/vmt-process.html#incident-report-taxonomy) and propose to open this bug by the end of the week if no one complains.