Bug#165729: debian-policy: symlinks in /usr/lib/cgi-bin
Package: debian-policy
Version: 3.5.6.1
Severity: important
Hello
I found a two packages (maybe there are more) which put symlinks
in /usr/lib/cgi-bin:
- ecartis-cgi (listargate.cgi -> lsg2.cgi)
- uprecords-cgi (uprecords.cgi -> ../../bin/uprecords)
I use apache as my webserver. Default configuration denies following
symlinks in /usr/lib/cgi-bin:
<Directory /usr/lib/cgi-bin/>
AllowOverride None
Options ExecCGI
Order allow,deny
Allow from all
</Directory>
There are no rules about dealing with symlinks in this directory.
Maybe policy should take it into account?
Regards
Artur
-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux blabluga.hell.pl 2.4.18 #1 Wed Mar 13 15:54:10 CET 2002 i486
Locale: LANG=C, LC_CTYPE=pl_PL
Versions of packages debian-policy depends on:
ii fileutils 4.1-10 GNU file management utilities
Reply to: