[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#167511: marked as done (New Policy for "cgi-bin" and "cgi-lib")



Your message dated Sun, 24 Nov 2002 16:32:52 -0500
with message-id <E18G4N2-0003Rr-00@auric.debian.org>
and subject line Bug#167511: fixed in boa 0.94.13-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 2 Nov 2002 23:51:48 +0000
>From bcwhite@pobox.com Sat Nov 02 17:51:47 2002
Return-path: <bcwhite@pobox.com>
Received: from cpu1612.adsl.bellglobal.com (dragon.bcwhite.dhs.org) [206.47.27.93] (mail)
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 18883O-0007Uj-00; Sat, 02 Nov 2002 17:51:46 -0600
Received: from localhost (pobox.com) [127.0.0.1] (bcwhite)
	by dragon.bcwhite.dhs.org with esmtp (Exim 3.35 #1 (Debian))
	id 18883c-0007Dw-00; Sat, 02 Nov 2002 18:52:00 -0500
Message-ID: <[🔎] 3DC46520.FA263059@pobox.com>
Date: Sat, 02 Nov 2002 18:52:00 -0500
From: Brian White <bcwhite@pobox.com>
X-Mailer: Mozilla 4.77 [en] (X11; U; Linux 2.4.19 i686)
X-Accept-Language: en
MIME-Version: 1.0
To: Debian Bugs <submit@bugs.debian.org>
Subject: New Policy for "cgi-bin" and "cgi-lib"
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=0.6 required=5.0
	tests=PATCH_UNIFIED_DIFF,SPAM_PHRASE_00_01,USER_AGENT_MOZILLA_XM,
	      X_ACCEPT_LANG
	version=2.41
X-Spam-Level: 

Package: boa
Version: 0.94.8.3-1
Severity: important

There is new official Debian policy regarding the use of "cgi-bin" in web
servers.  The basic issue is that many webmasters expect to have this
directory available for their own use and not have it taken over by the
system to be used by the various Debian packages.  This new policy should be
in complete effect by the next release of Debian.

I've started the change by reporting bugs against the various web servers
and then later, after they've had a chance to address it, I'll report bugs
against those packages that still use the old location.

To address this, we are creating a new ScriptAlias "cgi-lib" that points to
/usr/lib/cgi-bin.  All Debian packages should eventually use that new
"/cgi-lib/" path in their URLs instead of the older "/cgi-bin/".  This
mechanism does allow for an easy upgrade path.

When updating a web server, the new "cgi-lib" needs to be added, but any
existing definition of "cgi-bin" should be left untouched.  (New installs
should set "cgi-bin" to point to "<webroot>/cgi-bin" for easy use by
webmasters.)  Systems with upgraded web-servers will continue to work with
the older packages (since both "cgi-bin" and "cgi-lib" point to the same
place), thus providing a relatively transparent conversion.

For full background information, you can read bug #32263 at:

	   http://bugs.debian.org/32263


The policy change is as follows:

===============================================================================
--- policy.sgml.orig    Fri Nov  3 00:02:17 2000
+++ policy.sgml Fri Nov  3 00:18:45 2000
@@ -2949,9 +2949,20 @@
                </example>
                and can be referred to as
                <example>
-                 http://localhost/cgi-bin/&lt;cgi-bin-name&gt;
-               </example></p></item>
+                 http://localhost/cgi-lib/&lt;cgi-bin-name&gt;
+               </example></p>
                
+             <p>The purpose of using <tt>cgi-lib</tt> instead of
+             <tt>cgi-bin</tt> is that most webmasters are used to having
+             <tt>cgi-bin</tt> available for their own local use, much like
+             <tt>/usr/local</tt>.  Having packages use <tt>cgi-lib</tt>
+             means that no changes need to be made by the webmaster to both
+             keep what they are used to and still have access to Debian
+             packages.</p>
+
+             <p>Web servers should include <tt>/cgi-lib/</tt> as a standard
+             ScriptAlias of <tt>/usr/lib/cgi-bin/</tt>.</p></item>
+
                
            <item><p>Access to html documents</p>
===============================================================================


Thank you!

                                          Brian
                                  ( bcwhite@pobox.com )

-------------------------------------------------------------------------------
                  Do, or do not.  There is no "try".  -- Yoda

---------------------------------------
Received: (at 167511-close) by bugs.debian.org; 24 Nov 2002 21:39:22 +0000
>From katie@auric.debian.org Sun Nov 24 15:39:22 2002
Return-path: <katie@auric.debian.org>
Received: from auric.debian.org [206.246.226.45] (mail)
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 18G4TI-0007F1-00; Sun, 24 Nov 2002 15:39:20 -0600
Received: from katie by auric.debian.org with local (Exim 3.35 1 (Debian))
	id 18G4N2-0003Rr-00; Sun, 24 Nov 2002 16:32:52 -0500
From: Jordi Mallach <jordi@debian.org>
To: 167511-close@bugs.debian.org
X-Katie: $Revision: 1.28 $
Subject: Bug#167511: fixed in boa 0.94.13-2
Message-Id: <E18G4N2-0003Rr-00@auric.debian.org>
Sender: Archive Administrator <katie@auric.debian.org>
Date: Sun, 24 Nov 2002 16:32:52 -0500
Delivered-To: 167511-close@bugs.debian.org

We believe that the bug you reported is fixed in the latest version of
boa, which is due to be installed in the Debian FTP archive:

boa_0.94.13-2.diff.gz
  to pool/main/b/boa/boa_0.94.13-2.diff.gz
boa_0.94.13-2.dsc
  to pool/main/b/boa/boa_0.94.13-2.dsc
boa_0.94.13-2_i386.deb
  to pool/main/b/boa/boa_0.94.13-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 167511@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jordi Mallach <jordi@debian.org> (supplier of updated boa package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun, 24 Nov 2002 19:23:35 +0100
Source: boa
Binary: boa
Architecture: source i386
Version: 0.94.13-2
Distribution: unstable
Urgency: low
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Description: 
 boa        - Lightweight and High Performance WebServer
Closes: 160517 167511
Changes: 
 boa (0.94.13-2) unstable; urgency=low
 .
   * Debian QA upload, during Sarge's BSP #2.
   * debian/boa.init: install a new init file based on one by Bill Allombert
     which makes "restart" not fail if boa wasn't previously running
     (closes: #160517).
   * debian/rules:
     + use dh_installlogrotate to install the logrotate stuff.
     + remove arguments to dh_installexamples.
     + disable DH_VERBOSE.
     + remove docs/boa.info and docs/boa.html on clean (bashisms in Makefile).
   * debian/dirs: add usr/lib/cgi-lib.
   * debian/boa.examples: added.
   * debian/boa.conf: add "ScriptAlias /cgi-lib/ /usr/lib/cgi-bin/" for the
     upcoming "cgi-bin" policy (closes: #167511).
   * src/boa_grammar.y: patch from H. S. Teoh; adds a space after "$Id: $" so
     m4 doesn't try to expand "$*".
Files: 
 5be6b58268c0ace34f2fcc8b8b54a431 594 web optional boa_0.94.13-2.dsc
 0ea00d97802396f48aad9c7071054a71 10863 web optional boa_0.94.13-2.diff.gz
 75809fbf58ce847be2a62b77e34f3b5c 95390 web optional boa_0.94.13-2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE94TPkJYSUupF6Il4RAsF7AKDMhVmdQ6rynKAsu/sKFiKSSGam/QCfQK4z
OilfE7EtjyJXHJmn9rJVbfg=
=H9CY
-----END PGP SIGNATURE-----



Reply to: