From owner-cvs-ports@FreeBSD.ORG  Tue May 25 02:49:28 2004
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
Delivered-To: cvs-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id B528416A4CE; Tue, 25 May 2004 02:49:28 -0700 (PDT)
Received: from fillmore.dyndns.org (port-212-202-49-130.reverse.qsc.de
	[212.202.49.130])	by mx1.FreeBSD.org (Postfix) with ESMTP
	id B8DCD43D1D; Tue, 25 May 2004 02:49:26 -0700 (PDT)
	(envelope-from eikemeier@fillmore-labs.com)
Received: from [172.16.0.2] (helo=fillmore-labs.com)
	by fillmore.dyndns.org with esmtp (Exim 4.34; FreeBSD)
	id 1BSYYB-0008Y6-Us; Tue, 25 May 2004 11:48:48 +0200
Message-ID: <40B3167F.8060509@fillmore-labs.com>
Date: Tue, 25 May 2004 11:48:47 +0200
From: Oliver Eikemeier <eikemeier@fillmore-labs.com>
Organization: Fillmore Labs GmbH - http://www.fillmore-labs.com/
MIME-Version: 1.0
To: rob@debank.tv
References: <200405242302.i4ON2NcJ063759@repoman.freebsd.org>
	<ygehdu4ubgm.wl%ume@FreeBSD.org>
	<52001.193.79.18.58.1085477488.squirrel@debank.tv>
In-Reply-To: <52001.193.79.18.58.1085477488.squirrel@debank.tv>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
User-Agent: KMail/1.5.9
cc: cvs-ports@freebsd.org
cc: Pav Lucistnik <pav@freebsd.org>
cc: Hajimu UMEMOTO <ume@FreeBSD.org>
cc: ports-committers@freebsd.org
Subject: Re: cvs commit: ports/security/clamav-devel [...] pkg-install [...]
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 25 May 2004 09:49:28 -0000

rob@debank.tv wrote:

>>Hi,
>>
>>>>>>>On Mon, 24 May 2004 16:02:23 -0700 (PDT)
>>>>>>>Pav Lucistnik <pav@FreeBSD.org> said:
>>
>>[...]
>>pav>   - Chmod 770 socket directory
>>pav>   - Diff reduction against security/clamav port
>>
>>pav>   PR:             ports/67125
>>pav>   Submitted by:   Rob Evers <rob@debank.tv> (maintainer)
>>
>>Could you please change mode of /var/run/clamd to 750?  Unless this
>>change, sendmail complains about it and doesn't run.
>>
>>Index: pkg-install
>>diff -u pkg-install.orig pkg-install
>>--- pkg-install.orig	Tue May 25 15:57:11 2004
>>+++ pkg-install	Tue May 25 17:56:03 2004
>>@@ -38,7 +38,7 @@
>>
>> echo "===> Setting permissions..."
>> mkdir -p "${CLAMRUN}"
>>-chmod 770 "${CLAMRUN}"
>>+chmod 750 "${CLAMRUN}"
>> chown "${CLAMAVUSER}:${CLAMAVGROUP}" "${CLAMRUN}"
>>
>> mkdir -p "${CLAMLOG}"
>>
>>Sincerely,
>>
>>--
>>Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
>>ume@mahoroba.org  ume@{,jp.}FreeBSD.org
>>http://www.imasy.org/~ume/
> 
> I can confirm this,
> 
> Sendmail doesn't like group writable socket directorys, please apply this
> fix. (Bump PORTREVISION)
> 
> Rob Evers

I still don't get the purpose of not allowing non-root processes
to use clamav. This would break my exim installation, fortunately
I'm using security/clamav, where this change hasn't been made.

-Oliver