Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread Stephen Gran
This one time, at band camp, sean finney said: > hi, > > On Wed, May 03, 2006 at 03:02:49PM +0200, Alexis Sukrieh wrote: > > W: bugzilla: file-in-usr-lib-cgi-bin usr/lib/cgi-bin/bugzilla/ > > N: > > N: Packages shipping web server CGI files should install them in > > N: /usr/lib/cgi-li

Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread sean finney
hey joey, On Wed, May 03, 2006 at 02:51:50PM -0400, Joey Hess wrote: > AFAIK apache2 is the only web server package that allows scriptaliases > to be added to it in a policy conformant way (by dropping config file > snippets into /etc/apache2/conf.d/. Other web servers that support > scriptalias,

Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread Joey Hess
sean finney wrote: > - that cgi-bin is defined to be a location outside of debian packages' > reach entirely (/srv/www/cgi-bin or /var/www/cgi-bin, or whatever). > - httpds which support scriptaliasing ship this as the default location > - httpds which can not scriptalias it somewhere else (thos

Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread Neil McGovern
On Wed, May 03, 2006 at 07:51:00PM +0200, Bill Allombert wrote: > On Wed, May 03, 2006 at 11:40:06AM -0400, sean finney wrote: > > a note to the debian-policy folks: you may or may not be aware that > > we've done a significant amount of work regarding drafting a comprehensive > > and sensible poli

Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread sean finney
hey joey (et al), On Wed, May 03, 2006 at 01:33:58PM -0400, Joey Hess wrote: > sean finney wrote: > > this is a surprising change. guess that's what i get for not being > > subscribed to -policy :) > > Not really, it was last discussed on -policy in 2003, so being > subscribed wouldn't have help

Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread Bill Allombert
On Wed, May 03, 2006 at 11:40:06AM -0400, sean finney wrote: > a note to the debian-policy folks: you may or may not be aware that > we've done a significant amount of work regarding drafting a comprehensive > and sensible policy for web servers and web applications. i don' think > it's quite read

Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread Joey Hess
sean finney wrote: > this is a surprising change. guess that's what i get for not being > subscribed to -policy :) Not really, it was last discussed on -policy in 2003, so being subscribed wouldn't have helped, I'm as suprised as you are. > but i'm still grappling to understand the rationale beh

Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread sean finney
hi, On Wed, May 03, 2006 at 03:02:49PM +0200, Alexis Sukrieh wrote: > W: bugzilla: file-in-usr-lib-cgi-bin usr/lib/cgi-bin/bugzilla/ > N: > N: Packages shipping web server CGI files should install them in > N: /usr/lib/cgi-lib, not in /usr/lib/cgi-bin. This is done to avoid > N: co

Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread Sam Morris
On Wed, 03 May 2006 15:02:49 +0200, Alexis Sukrieh wrote: > I plan to do the following for the bugzilla package: > > 1/ Add a debconf note for notyfing the user about the location > change. As Wouter Verhelst said, don't do this! Put an entry in the NEWS.Debian file instead. -- Sam Morris h

Re: Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread Wouter Verhelst
On Wed, May 03, 2006 at 03:02:49PM +0200, Alexis Sukrieh wrote: > I plan to do the following for the bugzilla package: > > 1/ Add a debconf note for notyfing the user about the location change. Eh, no. Please don't. Debconf notes about things that were done to follow policy are the worst cases

Policy 3.7.0 - /usr/lib/cgi-{bin|lib}

2006-05-03 Thread Alexis Sukrieh
[ Please follow-up to debian-webapps ] Hi, I was working on packaging a new version of bugzilla and when I checked my package with lintian I discovered that /usr/lib/cgi-bin is now deprecated by the policy standards: W: bugzilla: file-in-usr-lib-cgi-bin usr/lib/cgi-bin/bugzilla/ N: N: Pa