Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Jun 2003 19:40:09 -0400 (EDT)
From:      Andrew J Caines <A.J.Caines@halplant.com>
To:        FreeBSD-gnats-submit@freebsd.org
Cc:        ports@FreeBSD.org
Subject:   mail/pyzor installed files permissions incorrect
Message-ID:  <20030616234009.A284A7A@mail.halplant.com>

next in thread | raw e-mail | index | archive | help

>Submitter-Id:  current-users
>Originator:    Andrew J. Caines
>Organization:  H.A.L. Plant
>Confidential:  no 
>Synopsis:      mail/pyzor installed files permissions incorrect
>Severity:      serious
>Priority:      high
>Category:      ports
>Class:         change-request
>Release:       FreeBSD 4.8-STABLE i386
>Environment:  
System: FreeBSD hal9000.halplant.com 4.8-STABLE FreeBSD 4.8-STABLE #0: Thu May 29 09:59:30 EDT 2003 root@hal9000.halplant.com:/.disk/obj/home/src/
sys/HAL9000 i386

>Description:
	The pyzor-0.4.0_1 (mail/pyzor) port installs its single doc with
	read (and, unneccesarily, write) access only to root. It is 600,
	but it should be 444.

	It would be good to install files such as README and ChangeLog as
	docs too.

	Additionally, the pyzor(d) scrips are installed 711, however I
	would expect 555 since they should not be writable and there is no
	need to hide the code from users.

>How-To-Repeat:
	# cd /usr/ports/mail/pyzor ; make && make install
	[snip]
	running install_scripts
	copying build/scripts-2.2/pyzor -> /usr/local/bin
	copying build/scripts-2.2/pyzord -> /usr/local/bin
	changing mode of /usr/local/bin/pyzor to 711
	changing mode of /usr/local/bin/pyzord to 711
	running install_data
	creating /usr/local/share/doc/pyzor
	copying docs/usage.html -> /usr/local/share/doc/pyzor
	===>   Generating temporary packing list
	===>   Registering installation for pyzor-0.4.0_1

	# ls -l 
	-rw-------  1 root  wheel  15560 Sep  7  2002 /usr/local/share/doc/pyzor/usage.html

>Fix:    
	pyzor-0.4.0/INSTALL indicates the need for this permissions
	change. AFAICT the "changing mode of ..." is part of the python
	package
	(${PREFIX}/lib/python2.2/distutils/command/install_scripts.py) and
	relies on pyzor-0.4.0/setup.py, however with my knowledge of
	Python (ie. diddly-squat) and quick insprection, it's not clear
	what change to make or to where, but clearly the mechanism exists.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030616234009.A284A7A>