Bug#462270: asterisk: agi-bin directory is intended for local scripts, and should be under /var

[Tim Retout]

On Wed, 2008-01-23 at 18:39 +0200, Tzafrir Cohen wrote:
> agi-bin is modeled after cgi-bin directory of an HTTP daemon, which
> resides with Debian under /usr/lib/cgi-bin . It's under /usr as it is
> intended for programs and libraries.

The executables should be shipped under /usr/lib or /usr/share in the
Debian packages, I agree.

> If you want to add your own agi script, you can still put it there in
> your local system.

I think we must disagree here - the FHS would advise administrators to
place their scripts under, say, /usr/local/lib/asterisk/agi-bin.

I do not think site administrators should be modifying anything
under /usr directly - it is possible that it is mounted read-only:
http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html#s4.9.2

> You should put stuff under /var if they are to be modified at system
> runtime.

Since I assume we can only configure one location as the agi-bin
directory, one approach would be for the Debian packages shipping AGI
scripts to install symlinks into /var/lib/asterisk/agi-bin. Then the
system administrator can also put symlinks in there.

This also has the benefit of retaining some compatibility with
upstream's location.

-- 
Tim Retout <tim at retout.co.uk>