Date: Sat, 13 May 2006 19:48:56 +0200 From: Clement Laforet <sheepkiller@cultdeadsheep.org> To: Brooks Davis <brooks@one-eyed-alien.net> Cc: ports@freebsd.org, Doug Barton <dougb@freebsd.org>, pav@freebsd.org Subject: Re: HEADS UP for maintainers of web applications Message-ID: <20060513174856.GC85967@goofy.cultdeadsheep.org> In-Reply-To: <20060513005843.GA9184@odin.ac.hmc.edu> References: <1147338576.799.9.camel@pav.hide.vol.cz> <44630121.6030303@FreeBSD.org> <20060513005843.GA9184@odin.ac.hmc.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
--WfZ7S8PLGjBY9Voh Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, May 12, 2006 at 05:58:43PM -0700, Brooks Davis wrote: >=20 > IMO, the best reason for this change (which I've thought was the right > thing to do for a long time) is that installing things into www/data > means they are immediately available to the entire world if the webserver > is up. That violates our normal principles of not running servers > without administrator intervention simply because the server happens to > have been installed. Unfortunately, IRL, it's not the case. Many apps are installed into=20 ${PREFIX}/www/data which is default DocumentRoot on apache =3D< 2.0 clem --WfZ7S8PLGjBY9Voh Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFEZhwIsRhfjwcjuh0RAvIxAJ92I8t46PyitmGmFgcv9dKXZvQsMQCdF1FM ouCWViLmheLkkrE2jeeeJFc= =q4ty -----END PGP SIGNATURE----- --WfZ7S8PLGjBY9Voh--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060513174856.GC85967>