From owner-freebsd-security Wed Jun 19 22:26:21 2002 Delivered-To: freebsd-security@freebsd.org Received: from smtp.web.de (smtp02.web.de [217.72.192.151]) by hub.freebsd.org (Postfix) with ESMTP id 3547C37B406 for ; Wed, 19 Jun 2002 22:25:56 -0700 (PDT) Received: from [80.129.116.189] (helo=floundjan.homeip.net) by smtp.web.de with esmtp (WEB.DE(Exim) 4.60 #1) id 17KuRa-0003m2-00; Thu, 20 Jun 2002 07:25:18 +0200 Received: from localhost (localhost.lan [127.0.0.1]) by floundjan.homeip.net (Postfix on FreeBSD 4.5) with ESMTP id 050E1264; Thu, 20 Jun 2002 07:25:17 +0200 (CEST) Received: from jan-linnb.lan (jan-linnb.lan [192.168.0.25]) by floundjan.homeip.net (Postfix on FreeBSD 4.5) with ESMTP id CAF20DE; Thu, 20 Jun 2002 07:25:13 +0200 (CEST) Subject: Re: Apache 1.3.26 port From: Jan Lentfer To: jdarnold@buddydog.org Cc: freebsd-security@FreeBSD.ORG In-Reply-To: <200206191723590704.0033D6FF@mail.speakeasy.net> References: <200206191723590704.0033D6FF@mail.speakeasy.net> Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Ximian Evolution 1.0.7-1mdk Date: 20 Jun 2002 07:24:27 +0200 Message-Id: <1024550667.2170.11.camel@jan-linnb.lan> Mime-Version: 1.0 X-Virus-Scanned: by AMaViS perl-10 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Am Mit, 2002-06-19 um 23.23 schrieb Jonathan Arnold: > >I would consider this semi-correct, at least from my experience. The data > >directories ARE seperated out. Notice that there is a data.default and a > > I, in fact, just went through this and would beg to differ. It is not > very kind to delete a complete directory tree without any warning, either > when you install (something like "data.default *WILL BE REPLACED ON > UPGRADE*") or it should check on upgrade and not remove it if it is there. > I lost my entire web site with nary a peep, and luckily had the most important > stuff on another computer. > > Nothing, anywhere, says anything about data.default getting overwritten / > replaced on upgrade. I agree. I am pretty much a newbie to FreeBSD and I must admit it didn't even know about the data / data.default symlink thing with apache for the first few weeks, because I just always typed "cd /usr/local/www/data" and really newer ls'd the www directory (OK, shoot me :-) ). Yes, people who say "back up your data" are absolutley right. But still I think the port should have 2 things: 1) A notice on the symlink structure of "data.default" and "data" on first installation (if it is there I just didn't read it, which is NOT impossible ;-) ) 2) A warning about overwriting the default directories - like "type 'yes' to proceed". I guess that's not too much work and it would prevent people without backups to lose their data ;-). Jan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message