[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: apache2: clearing the air [please read]



On Fri, Oct 12, 2001 at 08:51:18PM +1000, Hamish Moffatt wrote:
> On Thu, Oct 11, 2001 at 02:21:40PM +0100, Nick Phillips wrote:
> > /var is for "things that change". CGI scripts fit that description. So,
> > they should be in both /usr and /var...
> > 
> > CGI scripts *will* be changing, and not always under the control of the
> > admin. In fact, having /usr mounted ro would likely make such a situation
> > much more secure.
> 
> There is no point in editing Debian-provided CGI programs; your
> changes will be lost when the package is upgraded. Unless of course
> the file is a conffile, in which case it should be in /etc
> instead.
> 
> Of course as an end user I have CGI scripts in /var. However,
> the FHS quite rightly does not allow the vendor (Debian) to
> ship executable programs in /var.

You and Herbert are obviously quite right; I was thinking of user cgis.

I think this clearly points at the desirability of keeping debian-supplied
cgis in /usr/lib/cgi-bin and symlinking to it from a vhost somewhere if
desired. Something similar for the debian-supplied static web content, too.

Wichert's latest suggestion made a lot of sense. I'm not sure whether it
would allow for vhosting other than www, but... [shrug].

-- 
Nick Phillips -- nwp@lemon-computing.com
You should go home (*).



* at some point.



Reply to: