From owner-freebsd-ports@FreeBSD.ORG Sat May 13 17:49:00 2006 Return-Path: X-Original-To: ports@freebsd.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2A2CA16A624 for ; Sat, 13 May 2006 17:49:00 +0000 (UTC) (envelope-from sheepkiller@cultdeadsheep.org) Received: from goofy.cultdeadsheep.org (charon.cultdeadsheep.org [80.65.226.72]) by mx1.FreeBSD.org (Postfix) with SMTP id 2794043D70 for ; Sat, 13 May 2006 17:48:57 +0000 (GMT) (envelope-from sheepkiller@cultdeadsheep.org) Received: (qmail 11944 invoked by uid 1000); 13 May 2006 19:48:56 +0200 Date: Sat, 13 May 2006 19:48:56 +0200 From: Clement Laforet To: Brooks Davis Message-ID: <20060513174856.GC85967@goofy.cultdeadsheep.org> References: <1147338576.799.9.camel@pav.hide.vol.cz> <44630121.6030303@FreeBSD.org> <20060513005843.GA9184@odin.ac.hmc.edu> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="WfZ7S8PLGjBY9Voh" Content-Disposition: inline In-Reply-To: <20060513005843.GA9184@odin.ac.hmc.edu> User-Agent: Mutt/1.5.10i Cc: ports@freebsd.org, Doug Barton , pav@freebsd.org Subject: Re: HEADS UP for maintainers of web applications X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 May 2006 17:49:00 -0000 --WfZ7S8PLGjBY9Voh Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, May 12, 2006 at 05:58:43PM -0700, Brooks Davis wrote: >=20 > IMO, the best reason for this change (which I've thought was the right > thing to do for a long time) is that installing things into www/data > means they are immediately available to the entire world if the webserver > is up. That violates our normal principles of not running servers > without administrator intervention simply because the server happens to > have been installed. Unfortunately, IRL, it's not the case. Many apps are installed into=20 ${PREFIX}/www/data which is default DocumentRoot on apache =3D< 2.0 clem --WfZ7S8PLGjBY9Voh Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFEZhwIsRhfjwcjuh0RAvIxAJ92I8t46PyitmGmFgcv9dKXZvQsMQCdF1FM ouCWViLmheLkkrE2jeeeJFc= =q4ty -----END PGP SIGNATURE----- --WfZ7S8PLGjBY9Voh--