-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 13.02.2012 10:14, schrieb Wolfgang Rosenauer:
We have a policy to not enable daemons by default to avoid accidentally wide open systems. That's a good practice for any kind of service IMO. Unfortunately we lack infrastucture and tools to manage web apps properly. A tool like chkconfig that also understands virtualhosts etc would be nice, wouldn't it? :-)
I agree with the "not enable daemons by default" and that's why I replied that the localhost option might be a solution. Another one would be the Apache server flags. I can do either but again it should be as consistent as possible. I'd probably like to hear an Apache maintainer what is preferred (if there is any).
A lot of pear software adheres to separation of config and data, other things can be patched to work this way. Proposal: 1) Immutable parts of web apps live in /usr/share/php5/* (install tarballs) or /usr/share/php5/PEAR/* (if they are pear packages( 2) Config lives in /etc/{appname} 3) We find a dir in /srv/ for apps that cannot easily be patched to work this way or need a web-writable folder 4) rpm-installed web apps listen on localhost by default 5) We won't be all too strict and won't scare off maintainers of existing packages Candy: 6) If somebody mentors me on the best practices for /etc/sysconfig and yast development, I'll develop a nice little yast module which configures some aspects of the required vhost.d/ and conf.d/ stuff. Is there any skeleton/template for this? I am in no hurry with this though. If it's ready for 12.2 - fine, if not - then later. - -- Ralf Lang Linux Consultant / Developer Tel.: +49-170-6381563 Mail: lang@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk85ABgACgkQCs1dsHJ/X7AsxgCgx5iovwZr6tP14/vC+HuuEFbp PeUAniDjwRbRpTK1Opx/k8lEcEQPCWZ9 =P9Kg -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org