[arch-general] Wesnoth probably has wrong dependency

2020-06-03 Thread Peter Nabbefeld



Hello,

as Python2 has been sunset since the beginning of this year
(https://www.python.org/doc/sunset-python-2/) I'm looking forward to
removing it. One of the packages still depending on python2 is wesnoth,
though due to https://wiki.wesnoth.org/Maintenance_tools it should work
with Python3 already. Of course, this should work, since Python3 is
installed already besides Python2, but it seems to be an unnecessary
dependency. Instead, the dependency should be updated to python.

Kind regards

Peter


[arch-general] community/NUT access cgi in /usr/share/nut/cgi without FollowSymLinks?

2020-06-03 Thread David C. Rankin
All / Maxime,

  With the nut build option setting:

--with-cgipath=/usr/share/nut/cgi \

when using apache with the default /srv/http/cgi-bin location, how are you
supposed to access the cgi files in /usr/share/nut/cgi "Safely"?

  I have the entire /usr/share/nut/html directory protected by a dbm database
file manipulated with dbmmanage, so to reach the  you must
authenticate. That said, the only way I can make the cgi scripts work is by
setting Options FollowSymLinks in the  for "/srv/http/cgi-bin"
after symlinking (e.g. ln -s /usr/share/nut/cgi /srv/http/cgi-bin/nut)

  Is this safe? Is this intended way to provide access to the cgi scripts?

-- 
David C. Rankin, J.D.,P.E.