[Pkg-dns-devel] Bug#593940: bind9utils: dnssec-{keygen, signzone} should not be in /usr/sbin

[Bernhard Schmidt]

Control: tags -1 + wontfix

On Sun, Aug 22, 2010 at 03:41:49PM +0200, Philipp Kern wrote:

Hi,

> Package: bind9utils
> Version: 1:9.7.1.dfsg.P2-2
> Severity: normal
> 
> Why are dnssec-{keygen,signzone} in /usr/sbin?  They are perfectly usable
> from normal user accounts and zone signing actions are not exactly carried
> through by "system binaries" as specified by the FHS.

This is where upstream (and every other distribution) puts these files.
Changing this now would break compatibity with everyone else and
existing scripts referencing the full path name.

Nothing prevents you from calling these programs with the full path (or
changing PATH in your script). 

Bernhard