Author: rra
Date: 2006-04-27 06:49:57 +0200 (Thu, 27 Apr 2006)
New Revision: 636
Modified:
trunk/checks/files
trunk/checks/files.desc
trunk/debian/changelog
trunk/testset/scripts/debian/rules
trunk/testset/tags.scripts
Log:
* checks/files{.desc,}:
+ [RA] Warn about files installed in /usr/lib/cgi-bin. Policy now
states they should be installed in /usr/lib/cgi-lib.
Modified: trunk/checks/files
===================================================================
--- trunk/checks/files 2006-04-27 04:49:27 UTC (rev 635)
+++ trunk/checks/files 2006-04-27 04:49:57 UTC (rev 636)
@@ -246,6 +246,11 @@
tag "package-installs-file-to-usr-x11r6", "$file";
}
+ # ---------------- /usr/lib/cgi-bin
+ elsif ($file =~ m,^usr/lib/cgi-bin/\S,) {
+ tag "file-in-usr-lib-cgi-bin", "$file";
+ }
+
# ---------------- /usr/lib/sgml
elsif ($file =~ m,^usr/lib/sgml/\S,) {
if ($perm =~ m/^-.*[xs]/) {
Modified: trunk/checks/files.desc
===================================================================
--- trunk/checks/files.desc 2006-04-27 04:49:27 UTC (rev 635)
+++ trunk/checks/files.desc 2006-04-27 04:49:57 UTC (rev 636)
@@ -536,3 +536,12 @@
files that are intended to create a menu should be placed in
<tt>/usr/share/applications/</tt>, and no longer in
<tt>/usr/share/gnome/apps</tt> or <tt>/usr/share/applnk</tt>
+
+Tag: file-in-usr-lib-cgi-bin
+Type: warning
+Info: Packages shipping web server CGI files should install them in
+ <tt>/usr/lib/cgi-lib</tt>, not in <tt>/usr/lib/cgi-bin</tt>. This is
+ done to avoid conflicts with the cgi-bin script alias, which is reserved
+ for the local use of webmasters. Web servers should include /cgi-lib/ as
+ a standard ScriptAlias pointing to that directory.
+Ref: policy 11.5
Modified: trunk/debian/changelog
===================================================================
--- trunk/debian/changelog 2006-04-27 04:49:27 UTC (rev 635)
+++ trunk/debian/changelog 2006-04-27 04:49:57 UTC (rev 636)
@@ -1,13 +1,15 @@
lintian (1.23.19) UNRELEASED; urgency=low
- * checks/files.desc:
+ * checks/files{.desc,}:
+ [RA] Add the references to Policy for the deprecation of X11R6
directories now that Policy has been updated in 3.7.0.0.
+ [RA] Policy now mandates FHS 2.3. Update tag descriptions.
+ + [RA] Warn about files installed in /usr/lib/cgi-bin. Policy now
+ states they should be installed in /usr/lib/cgi-lib.
* checks/scripts.desc:
+ [RA] Using invoke-rc.d is now required by Policy 3.7.0.0.
- -- Russ Allbery <[EMAIL PROTECTED]> Wed, 26 Apr 2006 19:17:42 -0700
+ -- Russ Allbery <[EMAIL PROTECTED]> Wed, 26 Apr 2006 21:44:08 -0700
lintian (1.23.18) unstable; urgency=low
Modified: trunk/testset/scripts/debian/rules
===================================================================
--- trunk/testset/scripts/debian/rules 2006-04-27 04:49:27 UTC (rev 635)
+++ trunk/testset/scripts/debian/rules 2006-04-27 04:49:57 UTC (rev 636)
@@ -12,6 +12,7 @@
install -d $(tmp)/usr/share/scripts/
install -d $(tmp)/usr/share/doc/scripts/
install -d $(tmp)/usr/lib/python2.3/site-packages/
+ install -d $(tmp)/usr/lib/cgi-bin
install -d $(tmp)/DEBIAN
install -m 755 pyfoo $(tmp)/usr/bin/
@@ -37,6 +38,9 @@
echo "#!/bin/sh" > $(tmp)/usr/share/scripts/foo\$$bar
chmod 755 $(tmp)/usr/share/scripts/foo\$$bar
+ echo "#!/bin/sh" > $(tmp)/usr/lib/cgi-bin/cgi-script
+ chmod 755 $(tmp)/usr/lib/cgi-bin/cgi-script
+
# Should produce complaints about a missing debhelper dependency, but not a
# missing Python dependency.
dh_python
Modified: trunk/testset/tags.scripts
===================================================================
--- trunk/testset/tags.scripts 2006-04-27 04:49:27 UTC (rev 635)
+++ trunk/testset/tags.scripts 2006-04-27 04:49:57 UTC (rev 636)
@@ -23,6 +23,7 @@
W: scripts: binary-without-manpage suidperlfoo
W: scripts: binary-without-manpage suidperlfoo2
W: scripts: binary-without-manpage tkfoo
+W: scripts: file-in-usr-lib-cgi-bin usr/lib/cgi-bin/cgi-script
W: scripts: package-installs-python-pyc
usr/lib/python2.3/site-packages/test.pyc
W: scripts: setuid-binary usr/bin/suidperlfoo 4755 root/root
W: scripts: setuid-binary usr/bin/suidperlfoo2 4755 root/root
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
