Created attachment 163469 [details] rssroll 0.5 patch Update www/rssroll to version 0.5 ChangeLog: https://github.com/koue/rssroll/blob/master/ChangeLog http://rein.chaosophia.net/poudriere/rssroll-0.5-102x386.log.txt http://rein.chaosophia.net/poudriere/rssroll-0.5-102x64.log.txt http://rein.chaosophia.net/poudriere/rssroll-0.5-93x386.log.txt http://rein.chaosophia.net/poudriere/rssroll-0.5-93x64.log.txt
Take.
Hi, I don't think there's any need for all those files to be owned by www:www. WWWOWN is a user it can't be part of a path. Also, this should install itself into WWWDIR, not www directly. Can you please rework this patch?
Created attachment 163812 [details] new rssroll 0.5 patch New patch with fixed pkg-plist. Files are still owned by WWW user. I think its better if web files are not owned by root. http://rein.chaosophia.net/poudriere/rssroll-0.5-102x386.log.txt http://rein.chaosophia.net/poudriere/rssroll-0.5-102x64.log.txt http://rein.chaosophia.net/poudriere/rssroll-0.5-93x386.log.txt http://rein.chaosophia.net/poudriere/rssroll-0.5-93x64.log.txt
It is better if files are not owned by www users as the app will be run as www user. If the app gets rooted then you will be happy that the www user is not allowed to overwrite the files. Only the files supposed to be accessed (write mode) by the application when running should be owned by the www user like cache files, temp files etc. all other files should not be owned by www user.
back to pool
Created attachment 164540 [details] rssroll 0.5 patch fixed pkg-plist removed www ownership Update previous patch by removing www user ownership of the files.
Can't be In Progress without an Assignee. @Martin, Nikola has provided an updated patch. If you can't take care of this issue, please reset to 'Open' @Nikola * Please confirm this updated change passes QA (portlint, poudriere) * Please set maintainer-approval to "+" on attachments for ports you are MAINTAINER of to ensure they get seen.
(In reply to Kubilay Kocak from comment #7) thanks ;) I'll take care of it.
Created attachment 165248 [details] rssroll 0.5 patch fixed pkg-plist; removed www ownership; remove PLIST_SUB; portlint is fine. poudriere is ok. http://rein.chaosophia.net/poudriere/rssroll-0.5-102x386.log.txt http://rein.chaosophia.net/poudriere/rssroll-0.5-102x64.log.txt http://rein.chaosophia.net/poudriere/rssroll-0.5-93x386.log.txt http://rein.chaosophia.net/poudriere/rssroll-0.5-93x64.log.txt
A commit references this bug: Author: miwi Date: Sat Jan 16 17:21:18 UTC 2016 New revision: 406245 URL: https://svnweb.freebsd.org/changeset/ports/406245 Log: - Update to 0.5 PR: 204777 Submitted by: maintainer Changes: head/www/rssroll/Makefile head/www/rssroll/distinfo head/www/rssroll/pkg-plist