Re: [gentoo-dev] Poll: Where should web applications be installed?

[Stuart Herbert <stuart@gentoo.org>]

[-- Attachment #1: signed data --]
[-- Type: text/plain, Size: 1765 bytes --]

Hi Max,

On Wednesday 23 July 2003 3:29 pm, Max Kalika wrote:
> Personally, I like /usr/share/webapps.  

That's a good suggestion ;-)

> One question though.  Why do all
> ebuilds currently insist on making files owned by the web user (apache)?
> Seems very wrong to me as the apache user is able to write to the
> applications.  It seems just like giving ownership to a regular user
> account  for other applications.

Because most web apps are badly written, and rely on write access to 
directories on the machine.  Sorry - I just can't think of a polite way to 
put that ;-)

As an interesting aside, because we run apache under the apache user (rather 
than a nobody user), it'll make the business of supporting multiple web 
servers quite a mess.  I mean, if you install tikiwiki, which user should own 
it?!?

> > While I'm at it, I'm proposing that we create a new set of 'web-XXX'
> > groups for holding web applications.  For example, wiki engines would go
> > under 'web-wiki', bulletin boards under 'web-forums', and so on.  This'd
> > make it much easier for users to find these packages.
>
> I like it!

I read your post about having proposed this before, but with no real response.  
Tell you what - if no-one else sends through any feedback, I guess no-one 
would really notice if we went ahead and just did this? ;-)

Best regards,
Stu
-- 
Stuart Herbert                                              stuart@gentoo.org
Gentoo Developer                                       http://www.gentoo.org/
Upcoming packages list                http://dev.gentoo.org/~stuart/packages/

GnuGP key id# F9AFC57C available from http://pgp.mit.edu
Key fingerprint = 31FB 50D4 1F88 E227 F319  C549 0C2F 80BA F9AF C57C
--

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]