[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#553536: iptotal: dir-or-file-in-var-www /var/www/iptotal/images/Archive_Button.gif and 12 others



Package: iptotal
Version: 0.3.3-8
Severity: serious
User: lintian-maint@debian.org
Usertags: dir-or-file-in-var-www

Debian packages should not install files under /var/www. This is not
one of the /var directories in the File Hierarchy Standard and is
under the control of the local administrator. Packages should not
assume that it is the document root for a web server; it is very
common for users to change the default document root and packages
should not assume that users will keep any particular setting. 

Packages that want to make files available via an installed web server
should instead put instructions for the local administrator in a
README.Debian file and ideally include configuration fragments for
common web servers such as Apache.

As an exception, packages are permitted to create the /var/www
directory due to its past history as the default document root, but
should at most copy over a default file in postinst for a new install.

Refer to Filesystem Hierarchy Standard (The /var Hierarchy) for
details.

One solution that works is to put configuration files into
/etc/<package_name>, put static content, if any, into
/usr/{share,lib}/<package_name>, then create /var/lib/<package name>
as home for the package, and symlink the files from /etc and /usr/
into the /var/lib/<package_name>. Then create a simple set of
configuration snippets for popular web servers (for example, files one
may link into /etc/apache2/conf.d) and put them into
/etc/<package_name>. This way user modifiable files stil live in /etc,
and a simple operation can make the package go live.

Filed as serious, since this is a violation of the FHS (which is part
of policy), and also since a package with these files will currently
get this package rejected. See
  http://lists.debian.org/debian-devel-announce/2009/10/msg00004.html
for details. This means the package has been deemed too buggy to be in
Debian.

manoj


-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'oldstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.31.4-anzu-2 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iptotal depends on:
ii  apache2                       2.2.14-1   Apache HTTP Server metapackage
ii  apache2-mpm-prefork [httpd]   2.2.14-1   Apache HTTP Server - traditional n
ii  libc6                         2.10.1-3   GNU C Library: Shared libraries
ii  libpcap0.8                    1.0.0-4    system interface for user-level pa
pn  rrdtool                       <none>     (no description available)
ii  tcpdump                       4.0.0-4    A powerful tool for network monito

iptotal recommends no packages.

iptotal suggests no packages.



Reply to: