#535282 make info2www usable as installed

#535282#5
Date:
2009-07-01 11:12:20 UTC
From:
To:
If I call http://localhost/cgi-bin/info2www I don't end at the Info
overview, but see the CGI script of info2www in my browser. On the other
hand http://localhost/cgi-bin/info2www?(fileutils): works fine.

I tried other web server like lighttpd, boa and apache, but it's still
the same. Then I installed it on my laptop and it works without a
problem. The difference between the systems basically are that this
system is 64bit and the laptop 32bit.

Perhaps there is a needed library installed on the laptop, which isn't
on my PC, but I don't know what to look for. If thats the case it should
be recommended or suggested for info2www.

#535282#10
Date:
2010-12-29 01:55:23 UTC
From:
To:
retitle 535282 make info2www usable as installed
severity 535282 wishlist
thanks

Since README.Debian explains how to configure info2www before making
this useful (with typo), this is not really a bug but wishlist.

Since there are other similar packages in archive which do not suffer
this phenomena, we should make this useful as installed like others.

I think the last fix to #173246 was well intended one but was a bit
rough solution.

First, policy only say "Web Applications should try to avoid storing
files in the Web Document Root."  This is should.  Recommendation for use
of /usr/share/doc/package directory are meant for for documents of each
packages.

Solution by dwww using /etc/apache/conf.d/dwww symlink and
/etc/dwww/apache.conf seems to be the best solution to avoid security
concern raised by #173246.

For now, we work around problem with:
 $ sudo ln -s /var/lib/info2www/ /var/www
as described in #493366

Although trivial ones, it is sad to see 2 year old patches from
jbr@edlug.org.uk were not touched at all.  Uwe, have you noticed patches
in BTS.

Osamu

#535282#17
Date:
2010-12-29 01:55:23 UTC
From:
To:
retitle 535282 make info2www usable as installed
severity 535282 wishlist
thanks

Since README.Debian explains how to configure info2www before making
this useful (with typo), this is not really a bug but wishlist.

Since there are other similar packages in archive which do not suffer
this phenomena, we should make this useful as installed like others.

I think the last fix to #173246 was well intended one but was a bit
rough solution.

First, policy only say "Web Applications should try to avoid storing
files in the Web Document Root."  This is should.  Recommendation for use
of /usr/share/doc/package directory are meant for for documents of each
packages.

Solution by dwww using /etc/apache/conf.d/dwww symlink and
/etc/dwww/apache.conf seems to be the best solution to avoid security
concern raised by #173246.

For now, we work around problem with:
 $ sudo ln -s /var/lib/info2www/ /var/www
as described in #493366

Although trivial ones, it is sad to see 2 year old patches from
jbr@edlug.org.uk were not touched at all.  Uwe, have you noticed patches
in BTS.

Osamu

#535282#22
Date:
2010-12-29 04:12:29 UTC
From:
To:
I looked into this info2www more and found this package upstream has
been long dead from 1994.

This is FYI to maintainer who is asking for newer release in
README.Debian.

It seems gentoo/redhat/suse are using newer info2html by quick and rough
web search.

http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-text/info2html/ChangeLog?view=markup
http://sourceforge.net/projects/info2html/
http://sourceforge.net/projects/info2html/files/info2html/info2html-2.0/

This is much newer although it was from 2006.  As I see, it supports css
etc and looks modern.

Osamu

#535282#27
Date:
2010-12-29 05:20:31 UTC
From:
To:
Here is consolidated patch for this package to fix all bug reported.

Please note I install file in /var/www following last resort method
described in lintian message.

+++ lintian output +++
I: info2www source: missing-debian-source-format
W: info2www source: debhelper-but-no-misc-depends info2www
W: info2www source: out-of-date-standards-version 3.8.0 (current is 3.9.1)
I: info2www: extended-description-is-probably-too-short
+++ end of lintian output +++

This is minimum change patch (I did not move to dh7 etc.) These warning can be
fixed but it may be better to package info2html.  Anyway this for wheezy since
we are in deep freeze.

#535282#32
Date:
2010-12-29 05:34:25 UTC
From:
To:
Hi,

I missed inclusion of
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493368

but otherwise, my previous patch should be good.

Osamu