Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-07-16 Thread Russ Allbery
Charles Plessy writes: > Le Mon, Jun 14, 2010 at 04:21:31PM +0900, Charles Plessy a écrit : >> I have panicked a bit, thinking that webservers will not look in >> /usr/lib/cgi-bin/ recursively. Also, I was shied by the "Should" level >> of the recommendation (§11.5), understanding it like a stron

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-07-14 Thread Charles Plessy
Le Mon, Jun 14, 2010 at 04:21:31PM +0900, Charles Plessy a écrit : > > I have panicked a bit, thinking that webservers will not look in > /usr/lib/cgi-bin/ recursively. Also, I was shied by the "Should" level of the > recommendation (§11.5), understanding it like a strong request to use that > pla

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-14 Thread Charles Plessy
Le Sun, Jun 13, 2010 at 09:31:03AM -0700, Russ Allbery a écrit : > Charles Plessy writes: > > > will web servers find the CGI scripts automagically in > > /usr/lib/cgi-bin/? > > That's the implication of this section. Web servers should be configured > to serve that location by default. This i

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-13 Thread Andrew McMillan
On Sat, 2010-06-12 at 12:35 -0700, Russ Allbery wrote: > "Rémi Perrot" writes: > > > In section 12.5 of the policy it like that it is not possible to put > > cgi script in /usr/lib/cgi-lib// > > > If this is true, we will have more and more file name conflict, and > > these conflict are quite ha

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-13 Thread Russ Allbery
First off, I'm not sure what this discussion has to do with this proposal? It might just be a tangent prompted by seeing a mention of this part of Policy, which is fine, but I'm worried that I didn't explain the proposal very well, since this seems unrelated. Charles Plessy writes: > Le Sat, Jun

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-13 Thread sean finney
On Sun, Jun 13, 2010 at 06:03:12PM +0900, Charles Plessy wrote: > If not, there is not much advantage to move them under /usr/lib as it is done > now. Most other parts for packaged web sites are already in > /usr/share/. For simple sites, having the CGIs in /usr/lib/cgi-bin/ > makes the maintainer'

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-13 Thread Charles Plessy
Le Sat, Jun 12, 2010 at 12:35:41PM -0700, Russ Allbery a écrit : > > Despite its age, this bug is rather straightforward and is something we > really should have fixed years ago. The current wording around locations > of CGI programs implies that subdirectories of /usr/lib/cgi-bin may not be > us

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-12 Thread Russ Allbery
"Rémi Perrot" writes: > In section 12.5 of the policy it like that it is not possible to put > cgi script in /usr/lib/cgi-lib// > If this is true, we will have more and more file name conflict, and > these conflict are quite hard to resolve due to link change across > the application. These alre