From owner-freebsd-ports-bugs@FreeBSD.ORG Tue Jul 29 07:50:03 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3DD501065673 for ; Tue, 29 Jul 2008 07:50:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 1A4108FC0C for ; Tue, 29 Jul 2008 07:50:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m6T7o2fP025584 for ; Tue, 29 Jul 2008 07:50:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m6T7o2tr025583; Tue, 29 Jul 2008 07:50:02 GMT (envelope-from gnats) Resent-Date: Tue, 29 Jul 2008 07:50:02 GMT Resent-Message-Id: <200807290750.m6T7o2tr025583@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "Matthew D. Fuller" Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E6DF4106564A for ; Tue, 29 Jul 2008 07:47:53 +0000 (UTC) (envelope-from fullermd@over-yonder.net) Received: from thyme.infocus-llc.com (server.infocus-llc.com [206.156.254.44]) by mx1.freebsd.org (Postfix) with ESMTP id C21088FC0A for ; Tue, 29 Jul 2008 07:47:53 +0000 (UTC) (envelope-from fullermd@over-yonder.net) Received: from draco.over-yonder.net (c-75-64-197-185.hsd1.ms.comcast.net [75.64.197.185]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by thyme.infocus-llc.com (Postfix) with ESMTPSA id B034937B562 for ; Tue, 29 Jul 2008 02:31:06 -0500 (CDT) Received: by draco.over-yonder.net (Postfix, from userid 100) id 77A1F61C42; Tue, 29 Jul 2008 02:31:05 -0500 (CDT) Message-Id: <20080729073105.77A1F61C42@draco.over-yonder.net> Date: Tue, 29 Jul 2008 02:31:05 -0500 (CDT) From: "Matthew D. Fuller" To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/126069: [PATCH] security/clamav: Allow setting owner/group on milter socket X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: "Matthew D. Fuller" List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jul 2008 07:50:03 -0000 >Number: 126069 >Category: ports >Synopsis: [PATCH] security/clamav: Allow setting owner/group on milter socket >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Tue Jul 29 07:50:02 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Matthew D. Fuller >Release: FreeBSD 7.0-BETA4 i386 >Organization: >Environment: System: FreeBSD draco.over-yonder.net 7.0-BETA4 FreeBSD 7.0-BETA4 #0: Sun Dec 9 18:37:58 CST 2007 root@draco.over-yonder.net:/bsd/obj/bsd/src/sys/DRACO i386 >Description: Recent changes to the clamav-milter.in rc script allow setting the mode on the socket, but not the ownership. This adds that capability. This is probably applicable to clamav-devel as well. >How-To-Repeat: >Fix: --- clamav-milter.in.orig 2008-07-29 02:13:54.000000000 -0500 +++ clamav-milter.in 2008-07-29 02:15:12.000000000 -0500 @@ -84,6 +84,9 @@ echo "There is no clamav-milter socket (${clamav_clamd_socket})!" exit 1 fi + /usr/sbin/chown \ + ${clamav_milter_socket_owner}:${clamav_milter_socket_group} \ + ${clamav_milter_socket} /bin/chmod ${clamav_milter_socket_mode} ${clamav_milter_socket} fi } @@ -94,6 +97,8 @@ : ${clamav_milter_socket="%%CLAMAV_MILTER_SOCKET%%"} : ${clamav_milter_flags="--postmaster-only --local --outgoing --timeout=0 --max-children=50"} : ${clamav_milter_socktimeout="60"} +: ${clamav_milter_socket_owner="clamav"} +: ${clamav_milter_socket_group="clamav"} : ${clamav_milter_socket_mode="755"} : ${clamav_clamd_socket="%%CLAMAV_CLAMD_SOCKET%%"} >Release-Note: >Audit-Trail: >Unformatted: