If you're bored during the freeze
kris at obsecurity.org
Tue Apr 27 03:04:59 PDT 2004
On Tue, Apr 27, 2004 at 02:04:26AM -0700, Brooks Davis wrote:
> On Fri, Apr 23, 2004 at 06:12:49PM -0700, Kris Kennaway wrote:
> > I'm probably going to add /usr/local/www to BSD.local.dist so it
> > becomes a "system" directory.
> This sounds like a good idea to me. One related issue is ports that
> intall under /usr/local/www/data/<subdir>. I've seen quite a few PHP
> ports that do that and it's a bad idea since that directory may or may
> not be a link to data.dist. I've moved my PHP ports to use
> /usr/local/www/<subdir> and to have a pkg-message that shows an apache
> <Alias> directive to add that to the web hierachy as /<subdir>/.
Yes, nothing should install under data/ since that's where a live
website usually lives, and it's Very Bad for ports to install
themselves so they immediately show up there 
 e.g. some ports have insecure default settings; they may change
the website behaviour; overwrite existing files, etc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20040427/e6899326/attachment.bin
More information about the freebsd-ports