From owner-freebsd-ports@freebsd.org Sun Jan 28 18:31:01 2018 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 79078ED7A06 for ; Sun, 28 Jan 2018 18:31:01 +0000 (UTC) (envelope-from bapt@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [96.47.72.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "freefall.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2EA3968F31; Sun, 28 Jan 2018 18:31:01 +0000 (UTC) (envelope-from bapt@freebsd.org) Received: by freefall.freebsd.org (Postfix, from userid 1235) id 26E894616; Sun, 28 Jan 2018 18:31:01 +0000 (UTC) Received: by ivaldir.etoilebsd.net (Postfix, from userid 1001) id DDD456A07D; Sun, 28 Jan 2018 19:31:00 +0100 (CET) Date: Sun, 28 Jan 2018 19:31:00 +0100 From: Baptiste Daroussin To: Yasuhiro KIMURA Cc: freebsd-ports@freebsd.org Subject: Re: daily security run output and joomla3 Message-ID: <20180128183100.itrn2rpc3edsmhfw@ivaldir.net> References: <20180129.025651.1943739201262226813.yasu@utahime.org> <20180128180456.wle3ydeqhshspq6y@ler-imac.local> <20180129.032722.1649622669605796083.yasu@utahime.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="di4sel6tljjgxahv" Content-Disposition: inline In-Reply-To: <20180129.032722.1649622669605796083.yasu@utahime.org> User-Agent: NeoMutt/20171215 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Jan 2018 18:31:01 -0000 --di4sel6tljjgxahv Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jan 29, 2018 at 03:27:22AM +0900, Yasuhiro KIMURA wrote: > From: Larry Rosenman > Subject: Re: daily security run output and joomla3 > Date: Sun, 28 Jan 2018 12:04:56 -0600 >=20 > > But as the OP notes, the joomla3 instructions *REQUIRE* > > removal of the install directory for security reasons, so=20 > > I understand where he is coming from.=20 >=20 > Do you mean that all installed file must be removed? If so, what about > simply deinstalling joomla3 package after instructions are finished? >=20 Does changing the owners of the directory to nobody helps? joomla (www user= s) might not be able to read it Best regards, Bapt --di4sel6tljjgxahv Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEgOTj3suS2urGXVU3Y4mL3PG3PloFAlpuFrcACgkQY4mL3PG3 PlqF1w/+LmEJoA3aDgHoXCYuCZD/OiOVZlhU9jyjbl2tQosZM4LP9jpaY0EnQ9gx 71cJvbRr4QzzRP4ExE4VXpGuR5KDK9lQZ7m2uJH9ZU2WA6TapG5+poJ4BfdJRG4t /N8jD7l9X2d4GGL7P/0aEHjOOCUxyR71INajdl6g8HKYHgW4wEMjYnDesM+kosD2 jWOCbjzvKJmlCNXxjW2cJRENf4/sEyTig07jCmjF8r5j3c7atZU7d9C49TXYhF/n 5VUi+dhfGfzMIolnM0maEUvYIqN52SrGYBdWlO8OkgiMCKYM0MV2vAxKeTmypMEx utShm1OmSNGEJ4S0fsdSmx+oBro8dIXSESXCDuEoM+CJ0t8z18pTX2KkHVNHCEuy RRzqTtJJNeYkuhn+6GoR1vpLaMZRwJg9vlHTXwE7+b4Nv+pQPGp0uPcUrAnLu6nI lxiZ6Gr/75ZT2hqzqQKO0Grmz2KAtg0wdfjV0r35yzIdvso6G/ASBwowyuZT3H+z VlFiAY67s532e5tcsDNLASszThwNv3ypE3P9iVPKO/8w1elSDkGdYZisxhzGT8TD Yo+zZcuZKHJlRvvc21cpHwVOO71GaJy81N2hmJ0cNOJLhbXTTzTjEkXj5mHO1bM7 5AbANiDq0KJalSHtgE2GkuP+CxYONQOb6is5q++Lo7+Byi0y6gg= =oTRO -----END PGP SIGNATURE----- --di4sel6tljjgxahv--