Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-07-16 Thread Russ Allbery
Charles Plessy ple...@debian.org writes: Le Mon, Jun 14, 2010 at 04:21:31PM +0900, Charles Plessy a écrit : I have panicked a bit, thinking that webservers will not look in /usr/lib/cgi-bin/ recursively. Also, I was shied by the Should level of the recommendation (§11.5), understanding it

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-07-14 Thread Charles Plessy
Le Mon, Jun 14, 2010 at 04:21:31PM +0900, Charles Plessy a écrit : I have panicked a bit, thinking that webservers will not look in /usr/lib/cgi-bin/ recursively. Also, I was shied by the Should level of the recommendation (§11.5), understanding it like a strong request to use that place,

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-14 Thread Charles Plessy
Le Sun, Jun 13, 2010 at 09:31:03AM -0700, Russ Allbery a écrit : Charles Plessy ple...@debian.org writes: will web servers find the CGI scripts automagically in /usr/lib/cgi-bin/package? That's the implication of this section. Web servers should be configured to serve that location by

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-13 Thread Charles Plessy
Le Sat, Jun 12, 2010 at 12:35:41PM -0700, Russ Allbery a écrit : Despite its age, this bug is rather straightforward and is something we really should have fixed years ago. The current wording around locations of CGI programs implies that subdirectories of /usr/lib/cgi-bin may not be used,

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-13 Thread sean finney
On Sun, Jun 13, 2010 at 06:03:12PM +0900, Charles Plessy wrote: If not, there is not much advantage to move them under /usr/lib as it is done now. Most other parts for packaged web sites are already in /usr/share/package. For simple sites, having the CGIs in /usr/lib/cgi-bin/ makes the

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-13 Thread Russ Allbery
First off, I'm not sure what this discussion has to do with this proposal? It might just be a tangent prompted by seeing a mention of this part of Policy, which is fine, but I'm worried that I didn't explain the proposal very well, since this seems unrelated. Charles Plessy ple...@debian.org

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-13 Thread Andrew McMillan
On Sat, 2010-06-12 at 12:35 -0700, Russ Allbery wrote: Rémi Perrot remi.per...@torrep.org writes: In section 12.5 of the policy it like that it is not possible to put cgi script in /usr/lib/cgi-lib/package-name/cgi-name If this is true, we will have more and more file name conflict, and

Bug#104373: Subdirectory under /usr/lib/cgi-lib should be explicitly allowed

2010-06-12 Thread Russ Allbery
Rémi Perrot remi.per...@torrep.org writes: In section 12.5 of the policy it like that it is not possible to put cgi script in /usr/lib/cgi-lib/package-name/cgi-name If this is true, we will have more and more file name conflict, and these conflict are quite hard to resolve due to link change