[arch-dev-public] [arch-commits] Commit in htdig/trunk (PKGBUILD)
dpmcgee at gmail.com
Sat Apr 25 12:15:03 EDT 2009
On Sat, Apr 25, 2009 at 10:45 AM, Giovanni Scafora <linuxmania at gmail.com> wrote:
> 2009/4/25, Dan McGee <dpmcgee at gmail.com>:
>> Installing into /srv/ is no different than installing into /home/,
>> IMO. It might be worse as it presents a relatively big security risk
>> for those that do run public facing services, and suddenly a new
>> script has been made available for web site users to run.
> Then, as you said, we should remove that symbolic link and the file
> /srv/http/cgi-bin/qtest installed by default?
I would just say/think that files in /srv/ should be managed by the
system admin and not pacman- anything they want in there should be
linked by the sysadmin from /usr/bin/ or elsewhere, rather than the
other way around.
More information about the arch-dev-public