Date: Wed, 23 Sep 2015 16:25:37 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 203287] security/maia: fix permissions handling Message-ID: <bug-203287-13@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203287 Bug ID: 203287 Summary: security/maia: fix permissions handling Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: Individual Port(s) Assignee: freebsd-ports-bugs@FreeBSD.org Reporter: amdmi3@FreeBSD.org CC: ek@purplehat.org CC: ek@purplehat.org Flags: maintainer-feedback?(ek@purplehat.org) Created attachment 161309 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=161309&action=edit Patch maia chowns its WWWDIR from Makefile. This is broken - owner should be set from pkg-plist. The patch fixes this. Actually though, WWWDIR (apart from directories which require write access) should not be owned by www at all and this is a security problem. -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-203287-13>