From owner-freebsd-security  Wed Jun 19 14:14:26 2002
Delivered-To: freebsd-security@freebsd.org
Received: from pike.epylon.com (mail03.epylon.com [63.93.9.99])
	by hub.freebsd.org (Postfix) with ESMTP id 44B0937B407
	for <freebsd-security@freebsd.org>; Wed, 19 Jun 2002 14:14:21 -0700 (PDT)
Received: from [192.168.4.154] (sf-gw.epylon.com [63.93.9.98])
	by pike.epylon.com (Postfix) with ESMTP
	id 6BD3559218; Wed, 19 Jun 2002 14:14:20 -0700 (PDT)
User-Agent: Microsoft-Entourage/10.1.0.2006
Date: Wed, 19 Jun 2002 14:14:18 -0700
Subject: Re: Apache 1.3.26 port
From: Jason DiCioccio <jd@epylon.com>
To: Brett Glass <brett@lariat.org>, Jan Lentfer <Jan.Lentfer@web.de>,
	<freebsd-security@FreeBSD.ORG>
Message-ID: <B936423A.2B5C%jd@epylon.com>
In-Reply-To: <4.3.2.7.2.20020619150748.0236b1d0@localhost>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

I would consider this semi-correct, at least from my experience.  The data
directories ARE seperated out.  Notice that there is a data.default and a
cgi-bin.default which data and cgi-bin are linked to.  If you break the
data/cgi-bin symlinks and just mkdir data/mkdir cgi-bin, your data should
not be overwritten, it should only overwrite data.default.

If this is another issue, I haven't encountered it.

Cheers,
-JD-

On 6/19/02 2:10 PM, "Brett Glass" <brett@lariat.org> wrote:

> Yes, installing the new port will nuke all of your data.
 [snip]
> 
> At 10:14 PM 6/18/2002, Jan Lentfer wrote:
> 
>> Hi,
>> 
>> i am new to this list, so I don't know if this is the right place for my
>> comment, so please be gentle ;-)
>> 
>> After reading all the mail about the apache vulnerability, today I
>> installed the new 1.3.26 port. The compilation, etc. went clean, I also
>> had to reinstall mod_php4 and mod_fastcgi until I could make apache
>> start. Then I found that all my subdirectories in /usr/local/data/www
>> were gone (deleted)!! Luckily this was on my private machine! Is this a
>> normal behaviour? Anyway, it's good I know it now so I will for sure
>> backup the directorires on my production machines
[snip]


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message