[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#32263: Splitting CGI-BIN



>>"Brian" == Brian White <bcwhite@precidia.com> writes:

 Brian> No, I mean that <webroot>/cgi-lib should point to
 Brian> /usr/lib/cgi-bin and <webroot>/cgi-bin should point to
 Brian> ~www-data/cgi-bin.  The latter is what webmaster expect or, at
 Brian> the very least, they expect to be able to control
 Brian> <webroot>/cgi-bin.

	Cool. With you so far.

 Brian> I believe that <webroot>/cgi-bin should access local
 Brian> cgi-scripts since that is the traditional method and the way
 Brian> most webmasters layout their site.  I'd like to use
 Brian> <webroot>/cgi-lib for access to the system cgi-scripts.


	Still here. 
 >> 
 >> Yes. But the scripts still live in ~www-data/cgi-bin, right?
 >> If not, I missed when you are going to have packages move the scripts
 >> out.

 Brian> All system scripts would live under /usr/lib/cgi-bin and be
 Brian> accessed via <webroot>/cgi-lib.  To make for a smooth
 Brian> transition, any existing alias of <webroot>/cgi-bin would
 Brian> remain untouched thus allowing uninterrupted access until all
 Brian> of the packages that need to change can be changed.  This
 Brian> shouldn't be a hardship for anybody since they're already
 Brian> forced to use <webroot>/cgi-bin in that capacity right now.

	So, as an early adopter, I start using /usr/lib/cgi-bin, it
 won't work until the web servers have done so. Hmm. perhaps we should
 recommend web servers provide the script alias, but warn packagers
 not to use it until web servers have transitioned.

	Unless, of course, the web server maintainers agree to add the
 alias on their own, in advance of policy, since you convinced them of
 the wisdom of doing so (well, I can dream)

 >> 
 >> I see two problems. The name space pollution has not been
 >> reduced -- since all scripts live in the same dir on disk; my
 >> cgi-file could be overwritten by a debian package. All we have done
 >> is created two names for the same underlying directory; but not given
 >> the sysadmin a private place to keep his files that is safe.

 Brian> Your personal cgi-script should _not_ be in /usr/lib/cgi-bin.

	I meant my packages cgi-bin script. I get kinda propreitary
 about _my_ code.

	Any how, when the web servers have mostly implemented the
 alias, we can then make general policy for packages to follow.
 Hmm. no way to avoid having all users change their book marks, then?

	manoj
-- 
 Wit is the rarest quality to be met with among people of
 education. William Hazlitt
Manoj Srivastava   <srivasta@debian.org>  <http://www.debian.org/%7Esrivasta/>
1024R/C7261095 print CB D9 F4 12 68 07 E4 05  CC 2D 27 12 1D F5 E8 6E
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C



Reply to: