[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#165729: debian-policy: symlinks in /usr/lib/cgi-bin



Package: debian-policy
Version: 3.5.6.1
Severity: important

Hello

I found a two packages (maybe there are more) which put symlinks
in /usr/lib/cgi-bin:

- ecartis-cgi (listargate.cgi -> lsg2.cgi)
- uprecords-cgi (uprecords.cgi -> ../../bin/uprecords)

I use apache as my webserver. Default configuration denies following
symlinks in /usr/lib/cgi-bin:
<Directory /usr/lib/cgi-bin/>
    AllowOverride None
    Options ExecCGI
    Order allow,deny
    Allow from all
</Directory>

There are no rules about dealing with symlinks in this directory.
Maybe policy should take it into account?

Regards
	Artur

-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux blabluga.hell.pl 2.4.18 #1 Wed Mar 13 15:54:10 CET 2002 i486
Locale: LANG=C, LC_CTYPE=pl_PL

Versions of packages debian-policy depends on:
ii  fileutils                     4.1-10     GNU file management utilities




Reply to: