Date: Sun, 03 Feb 2019 10:34:06 +0000 From: bugzilla-noreply@freebsd.org To: rc@FreeBSD.org Subject: [Bug 235185] www/fcgiwrap: environment should be cleaned in /usr/local/etc/rc.d/fcgiwrap Message-ID: <bug-235185-20181-iGumJTJe2j@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-235185-20181@https.bugs.freebsd.org/bugzilla/> References: <bug-235185-20181@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D235185 Rodrigo Osorio <rodrigo@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |Not A Bug Status|Open |Closed --- Comment #40 from Rodrigo Osorio <rodrigo@FreeBSD.org> --- After rethinking the arguments I don't gonna change the way www/fcgiwrap rc script behaves. I strongly believe that it's not rc script job to sanitize = the ENV variables since service(8) is doing that for you in a better way. I also don't wanna perform code duplication between service(8) and the www/fcgiwrap rc script because it's bad, and it prevents future changes in service(8) to apply to www/fcgiwrap. Finally, I don't wanna prevent peoples to start the www/fcgiwrap server manually with custom variables in debug purpose. Regarding the sanitize framework discussed before, you can continue the discussion in a new improvement PR. To me, I do not see the interest, becau= se once you are starting the daemon with service(8) the env is sanitized for f= ree. Cheers, - rodrigo @ John Von Essen : Regarding the default user changes used by www/fcgiwrap, nobody is the defa= ult because it's the less powered user in the system. Changing that breaks POLA= for sure without too much benefit for the user. --=20 You are receiving this mail because: You are on the CC list for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-235185-20181-iGumJTJe2j>