1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] Proofreading web applications policy
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Proofreading%20web%20applications%20policy&In-Reply-To=%3C201101181948.04290.maarten.vanraes%40gmail.com%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="002221.html">
<LINK REL="Next" HREF="002223.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] Proofreading web applications policy</H1>
<B>Maarten Vanraes</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Proofreading%20web%20applications%20policy&In-Reply-To=%3C201101181948.04290.maarten.vanraes%40gmail.com%3E"
TITLE="[Mageia-dev] Proofreading web applications policy">maarten.vanraes at gmail.com
</A><BR>
<I>Tue Jan 18 19:48:04 CET 2011</I>
<P><UL>
<LI>Previous message: <A HREF="002221.html">[Mageia-dev] Proofreading web applications policy
</A></li>
<LI>Next message: <A HREF="002223.html">[Mageia-dev] Importing RPM Spec File Syntax
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#2222">[ date ]</a>
<a href="thread.html#2222">[ thread ]</a>
<a href="subject.html#2222">[ subject ]</a>
<a href="author.html#2222">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>Op dinsdag 18 januari 2011 19:07:00 schreef Remy CLOUARD:
><i> Hello there,
</I>><i>
</I>><i> I started to have a look at the webapps policy.
</I>><i>
</I>><i> There’s something that has been bugging me for a while, that’s the
</I>><i> apache-centric way of thinking of this policy.
</I>><i>
</I>><i> To me, there are valuable alternatives to apache that deserve to be
</I>><i> treated equally.
</I>><i> Here are the packages that provides webserver
</I>><i>
</I>><i> apache-ssl|apache-mpm-event|apache-mpm-peruser|nginx|lighttpd|
</I>><i> cherokee|apache-mpm-itk|apache-mpm-worker|thttpd|apache-mpm-rsbac|
</I>><i> apache-mpm-prefork|boa
</I>><i>
</I>><i> “These are the files that are susceptible to change during the
</I>><i> application's lifetime. They go in /var/lib/foo. If they are supposed to
</I>><i> be editable by the application directly from the web interface, they
</I>><i> should be owned by apache user and apache group.”
</I>><i>
</I>><i> Could we create a generic group (webserver for instance) to allow
</I>><i> webapps to play nice with these webserver ?
</I>
i think we could call it www-data so we can play nice in multidistro
environment with idmapping (or possibly even no idmapping).
><i> Same goes for logfiles and config files containing sensitive
</I>><i> informations.
</I>><i>
</I>><i> I would also be in favor of creating subpackages for webapps that
</I>><i> provides better integration with apache such as files in
</I>><i> /etc/httpd/conf/webapps.d/.
</I>
i'm in favor of webapps that are webserver independant.
><i> That way, webapps should have a Requires on webserver, and the
</I>><i> subpackage should have one on apache.
</I>><i>
</I>><i> Another issue is the owner of /var/www. This directory is owned by
</I>><i> apache-conf. Could we instead make a generic package called
</I>><i> webserver-data for instance that would provide it ? This way each
</I>><i> package providing webserver would have to require webserver-data.
</I>
www-data ? again?
><i> Finally, that may be a little cosmetic detail, but I would prefer
</I>><i> template files for apache to be in a separate file in SOURCES/ that’s
</I>><i> included instead of creating it in the spec like:
</I>><i> cat > %{buildroot}%{_webappconfdir}/%{name}.conf <<EOF
</I>
agreed
One more thing, for apache specific: apache has multiple layouts, and the
current redhat-like one (or even mandriva-one) is not really that easy to
configure. the debian-style layout with vhosting on by default is much easier
imho. (perhaps vhosting by default could be something that all webservers are
set up on.)
However, this is all great, but we agreed to have mandriva-2010.2 upgrade
paths. so don't forget about that.
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="002221.html">[Mageia-dev] Proofreading web applications policy
</A></li>
<LI>Next message: <A HREF="002223.html">[Mageia-dev] Importing RPM Spec File Syntax
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#2222">[ date ]</a>
<a href="thread.html#2222">[ thread ]</a>
<a href="subject.html#2222">[ subject ]</a>
<a href="author.html#2222">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
