Date: Sun, 24 Jul 2005 16:03:36 +0200 (CEST) From: Lupe Christoph <lupe@lupe-christoph.de> To: FreeBSD-gnats-submit@FreeBSD.org Cc: cy@FreeBSD.org Subject: ports/84002: Aide clobbers /usr/local/etc/aide.conf Message-ID: <20050724140336.147B4A759@firewally.lupe-christoph.de> Resent-Message-ID: <200507241410.j6OEA2CC013670@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 84002
>Category: ports
>Synopsis: Aide clobbers /usr/local/etc/aide.conf
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Sun Jul 24 14:10:02 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Lupe Christoph
>Release: FreeBSD 4.10-RELEASE-p5 i386
>Organization:
>Environment:
System: FreeBSD firewally.lupe-christoph.de 4.10-RELEASE-p5 FreeBSD 4.10-RELEASE-p5 #2: Sat Dec 11 17:38:51 CET 2004 lupe@firewally.lupe-christoph.de:/usr/obj/usr/src/sys/FIREWALLY i386
>Description:
Because of a typo, upgrading aide will clobber it's
configuration file, potentially compromising security
>How-To-Repeat:
Install aide. Change /usr/local/etc/aide.conf. Reinstall.
>Fix:
--- aide.patch begins here ---
--- Makefile.orig Sat May 14 03:28:48 2005
+++ Makefile Sun Jul 24 15:58:22 2005
@@ -44,7 +44,7 @@
post-install:
@${INSTALL_DATA} ${FILESDIR}/aide.conf.freebsd ${PREFIX}/etc/aide.conf.sample
- @if [ ! -d ${PREFIX}/etc/aide.conf ]; then \
+ @if [ ! -f ${PREFIX}/etc/aide.conf ]; then \
${INSTALL_DATA} ${FILESDIR}/aide.conf.freebsd ${PREFIX}/etc/aide.conf ; \
fi
@if [ ! -d /var/db/aide/databases ]; then \
--- aide.patch ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050724140336.147B4A759>