[Pkg-dspam-misc] Bug#553498: Bug#553498: dspam-webfrontend: dir-or-file-in-var-www /var/www/dspam/admin.cgi and 6 others

[Manoj Srivastava]

On Sun, Nov 01 2009, Julien Valroff wrote:


>> >>         I think it is a serious bug, and you may not be able to upload
>> >>  your package unless this is fixed.
>> >
>> > I understand. I wish I could address this issue myself.
>> 
>>         Well, I think the way forward would be to move the directory out
>>  of /var/www? 
>
> Not that easy: dspam-webfrontend does rely on apache2-suexec, which sets
> the document root to /var/www
> Apache suexec obviously doesn't follow symlinks.

        So file a bug on apache2-suexec, since that seems to be the
 proximate cause of grief here.

> I think the main issue is that FHS doesn't set any document root for web
> applications data. That's why the Debian Policy agrees they are
> installed in the historic /var/www directory "if unavoidable" (I would
> tend to think this wording applies to dspam-webfrontend for now).

        I disagree. I think programs in Debian should not make such
 assumptions about document root; and policy should remove that
 sentence.  We are most of the way to not having a hard coded document
 root, and I think that is where we should be going.

        manoj

-- 
You know it's Monday when you wake up and it's Tuesday. Garfield
Manoj Srivastava <srivasta at debian.org> <http://www.debian.org/~srivasta/>  
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C