X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?a=blobdiff_plain;f=debian%2Fcontrol;h=84378cf17df686bfea3f87f687b518b66d1bf937;hb=186ea161e7d144dd8e3791f174a7173e2f399346;hp=a089e2c0aa852e87d37106b6d2b896725cd85edd;hpb=03a866952f4f2f7c26d0d54305d7ef739f5d9b2d;p=userv-utils.git

diff --git a/debian/control b/debian/control
index a089e2c..84378cf 100644
--- a/debian/control
+++ b/debian/control
@@ -15,6 +15,7 @@ Description: privsep utilities collection
  enabled by symlink /etc/userv/services.d/* -> ../services-available/*.
  .
  ipif - allow non-root users to create network interfaces
+ ucgi - run CGI programs in providing user's account
  mailq - allow users to view the mail queue
  ndc-reload  - allow certain users to reload the nameserver
  checkpasswd-* - allow users to run a UNIX password check
@@ -30,27 +31,8 @@ Description: dynamic DNS for shell account users
  Typically, this can be used to provide a `dyndns.org'-like service
  which is modifiable by shell account users.
  .
- The default configuration does not set up any users with permission
- to modify the DNS.
-
-Package: userv-cgi
-Architecture: any
-Depends: userv, ${shlibs:Depends}, ${misc:Depends}
-Recommends: httpd
-Description: user-provided CGI scripts invoked by userv
- This package contains ucgi, a userv service which allows CGI programs
- to be provided which do not run as the webserver user, but instead
- are owned by a particular other account.
- .
- Similar effects can be achieved with Apache's suexec; this package is
- for administrators who do not trust suexec and wish to defend the
- webserver from the CGI script providers, and vice versa, as much as
- possible.  This is achieved by using userv to do the cross-account
- call, rather than a custom setuid helper.
- .
- The default configuration allows the webserver user to invoke users'
- CGI programs from each user's ~/public-cgi, but to allow external
- callers to do this, the webserver will also need to be configured.
+ The default configuration creates the infrastructure (including a
+ service user) but does not allow any users to modify the DNS.
 
 Package: userv-groupmanage
 Architecture: all