[Pkg-dspam-misc] Bug#553498: Bug#553498: dspam-webfrontend: dir-or-file-in-var-www /var/www/dspam/admin.cgi and 6 others

[Julien Valroff]

Hi Manoj,

Le dimanche 01 novembre 2009 à 00:33 -0500, Manoj Srivastava a écrit :
> On Sat, Oct 31 2009, Julien Valroff wrote:
> 
> 
> > As dspam-webfrontend relies on apache2-suexec, which sets the document
> > root to /var/www/, I fear there is nothing we can do about this for
> > now.
> 
>         That is a serious bug in apache2-suexec, which is a blocking bug
>  for you, yes.

Would you please report this bug?

Also see the following bug I had reported for this issue:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542950
I had wrongly thought /srv/www was a good place to host web applications
data.

> 
> > Furthermore, as per
> > http://www.debian.org/doc/debian-policy/ch-customized-programs.html#s-web-appl:
> > "If access to the web document root is unavoidable then use /var/www
> > as the Document Root."
> 
>         That is not yet policy, and is merely a draft proposal. You may
>  not assume that /var/www is the document root under the official Debian
>  policy and the FHS.

A draft? I don't understand.
It is part of the Debian Policy 3.8.3, section 11.5, point 4

If not, then it is a bug in debian-policy...

> > I would hence think using /var/www for dspam-webfrontend is correct,
> > what do you think of it?
> 
>         I think it is a serious bug, and you may not be able to upload
>  your package unless this is fixed.

I understand. I wish I could address this issue myself.

Cheers,
Julien