From owner-freebsd-ports-bugs@FreeBSD.ORG Wed Oct 12 11:30:11 2005 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 407E416A41F for ; Wed, 12 Oct 2005 11:30:11 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id BB4F343D46 for ; Wed, 12 Oct 2005 11:30:10 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j9CBUAeQ078756 for ; Wed, 12 Oct 2005 11:30:10 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j9CBUAmx078751; Wed, 12 Oct 2005 11:30:10 GMT (envelope-from gnats) Resent-Date: Wed, 12 Oct 2005 11:30:10 GMT Resent-Message-Id: <200510121130.j9CBUAmx078751@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Denis Shaposhnikov Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 45E9916A41F for ; Wed, 12 Oct 2005 11:27:35 +0000 (GMT) (envelope-from dsh@neva.vlink.ru) Received: from deliver.smtp.vlink.ru (alias.rigel.internal.vlink.ru [217.23.88.17]) by mx1.FreeBSD.org (Postfix) with ESMTP id AE9DD43D45 for ; Wed, 12 Oct 2005 11:27:33 +0000 (GMT) (envelope-from dsh@neva.vlink.ru) Received: from smtp.smtp.vlink.ru (clamav.smtp.vlink.ru [192.168.4.1]) by deliver.smtp.vlink.ru (Postfix) with ESMTP id 6B6E1FECD39; Wed, 12 Oct 2005 15:27:31 +0400 (MSD) Received: from neva.vlink.ru (neva.vlink.ru [217.107.252.29]) by smtp.smtp.vlink.ru (Postfix) with ESMTP id 3E166100990F; Wed, 12 Oct 2005 15:27:31 +0400 (MSD) Received: from neva.vlink.ru (localhost [127.0.0.1]) by neva.vlink.ru (8.13.4/8.13.4) with ESMTP id j9CBRSIT041467; Wed, 12 Oct 2005 15:27:28 +0400 (MSD) (envelope-from dsh@neva.vlink.ru) Received: (from dsh@localhost) by neva.vlink.ru (8.13.4/8.13.4/Submit) id j9CBRSuE041463; Wed, 12 Oct 2005 15:27:28 +0400 (MSD) (envelope-from dsh) Message-Id: <200510121127.j9CBRSuE041463@neva.vlink.ru> Date: Wed, 12 Oct 2005 15:27:28 +0400 (MSD) From: Denis Shaposhnikov To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: dsh@neva.vlink.ru, lars.eggert@gmx.net Subject: ports/87317: Update port: www/jwchat (fix permissions) X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Denis Shaposhnikov List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2005 11:30:11 -0000 >Number: 87317 >Category: ports >Synopsis: Update port: www/jwchat (fix permissions) >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Wed Oct 12 11:30:09 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Denis Shaposhnikov >Release: FreeBSD 7.0-CURRENT i386 >Organization: >Environment: System: FreeBSD neva.vlink.ru 7.0-CURRENT FreeBSD 7.0-CURRENT #21: Sun Aug 14 15:59:53 MSD 2005 dsh@neva.vlink.ru:/var/FreeBSD/obj/var/FreeBSD/src/sys/NEVA i386 >Description: The port gives RW permissions for installed files to www user. I think that it's insecure solution. This patch fixes it. >How-To-Repeat: cd /usr/ports/www && make install ls -l /usr/local/www/jwchat >Fix: diff -Nru jwchat.orig/Makefile jwchat/Makefile --- jwchat.orig/Makefile Wed Oct 12 15:22:14 2005 +++ jwchat/Makefile Wed Oct 12 14:24:01 2005 @@ -25,12 +25,13 @@ do-install: ${MKDIR} ${PREFIX}/www ${DATADIR} - ${CP} ${WRKSRC}/config.js ${DATADIR} + ${INSTALL_DATA} ${WRKSRC}/config.js ${DATADIR} ${MV} ${WRKSRC}/config.js ${WRKSRC}/config.js.sample ${CP} -R ${WRKSRC}/ ${PREFIX}/www/${PORTNAME} [ ! -f ${PREFIX}/www/${PORTNAME}/config.js ] && \ ${CP} ${DATADIR}/config.js ${PREFIX}/www/${PORTNAME}/config.js || true - ${CHOWN} -R ${WWWOWN}:${WWWGRP} ${PREFIX}/www/${PORTNAME} + ${FIND} ${PREFIX}/www/${PORTNAME} ! -name config.js -print0 | ${XARGS} -0 ${CHOWN} ${SHAREOWN}:${SHAREGRP} + ${FIND} ${PREFIX}/www/${PORTNAME} -type f -and ! -name config.js -print0 -type f | ${XARGS} -0 ${CHMOD} ${SHAREMODE} post-install: @${CAT} ${PKGMESSAGE} >Release-Note: >Audit-Trail: >Unformatted: