[arch-dev-public] [arch-commits] Commit in htdig/trunk (PKGBUILD)

Dan McGee dpmcgee at gmail.com
Sat Apr 25 12:15:03 EDT 2009


On Sat, Apr 25, 2009 at 10:45 AM, Giovanni Scafora <linuxmania at gmail.com> wrote:
> 2009/4/25, Dan McGee <dpmcgee at gmail.com>:
>> Installing into /srv/ is no different than installing into /home/,
>>  IMO. It might be worse as it presents a relatively big security risk
>>  for those that do run public facing services, and suddenly a new
>>  script has been made available for web site users to run.
>
> Then, as you said, we should remove that symbolic link and the file
> /srv/http/cgi-bin/qtest installed by default?

I would just say/think that files in /srv/ should be managed by the
system admin and not pacman- anything they want in there should be
linked by the sysadmin from /usr/bin/ or elsewhere, rather than the
other way around.

-Dan


More information about the arch-dev-public mailing list