Bug#462270: asterisk: agi-bin directory is intended for local scripts, and should be under /var

[Tzafrir Cohen]

On Wed, Jan 23, 2008 at 05:30:42PM +0000, Tim Retout wrote:
> On Wed, 2008-01-23 at 18:39 +0200, Tzafrir Cohen wrote:
> > agi-bin is modeled after cgi-bin directory of an HTTP daemon, which
> > resides with Debian under /usr/lib/cgi-bin . It's under /usr as it is
> > intended for programs and libraries.
> 
> The executables should be shipped under /usr/lib or /usr/share in the
> Debian packages, I agree.
> 
> > If you want to add your own agi script, you can still put it there in
> > your local system.
> 
> I think we must disagree here - the FHS would advise administrators to
> place their scripts under, say, /usr/local/lib/asterisk/agi-bin.
> 
> I do not think site administrators should be modifying anything
> under /usr directly - it is possible that it is mounted read-only:
> http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html#s4.9.2

Just as you need to mount it read/write to install extra packages, you
need to mount it read/write to install local scripts. As with cgi-bin -
you can't easily have more than one directory, and it must also be used
for scripts installed by packages.

> 
> > You should put stuff under /var if they are to be modified at system
> > runtime.
> 
> Since I assume we can only configure one location as the agi-bin
> directory, one approach would be for the Debian packages shipping AGI
> scripts to install symlinks into /var/lib/asterisk/agi-bin. Then the
> system administrator can also put symlinks in there.
> 
> This also has the benefit of retaining some compatibility with
> upstream's location.

Upstream is incompatible with FHS. A symlink there might cause
confusion.

Can you give me a simple scenario where this actually helps? I'd hate
complicating things for nothing.

-- 
               Tzafrir Cohen
icq#16849755              jabber:tzafrir.cohen at xorcom.com
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com
http://www.xorcom.com  iax:guest at local.xorcom.com/tzafrir