Bug 87606 - Writable directories introduced by mail/squirrelmail-compatibility-plugin port.
Summary: Writable directories introduced by mail/squirrelmail-compatibility-plugin port.
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-ports-bugs (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-10-18 09:30 UTC by Goran Lowkrantz
Modified: 2005-11-08 20:01 UTC (History)
0 users

See Also:

Attachments
scp.tar.uue (13.80 KB, application/uue; x-mac-type="0"; x-mac-creator="0")
2005-11-06 17:05 UTC, alexander 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Goran Lowkrantz 2005-10-18 09:30:14 UTC 
In the mail/squirrelmail-compatibility-plugin, a number of directories are explicitly given write permissions to the web-server user.

Fix: 

Fix:
chown -R root:wheel /usr/local/www/squirrelmail/plugins/compatibility

Remedy - Remove line from Makefile:
${CHOWN} -R ${WWWOWN}:${WWWGRP} ${SQUIRRELDIR}/plugins/${SQUIRREL_PLUGIN_NAME}
How-To-Repeat: Install the port, cd to squirrelmail plugin directory and do an ls -lR compatibility/
Comment 1 Marcus Alves Grando freebsd_committer freebsd_triage 2005-11-03 13:05:12 UTC 
Dear maintainer,

Can you investigate this problem and submit patch?

http://www.freebsd.org/cgi/query-pr.cgi?pr=87606

Thanks

-- 
Marcus Alves Grando
marcus(at)corp.grupos.com.br  |  Grupos Internet S/A
   mnag(at)FreeBSD.org         |  FreeBSD.org
Comment 2 Marcus Alves Grando freebsd_committer freebsd_triage 2005-11-03 13:05:28 UTC 
State Changed
From-To: open->feedback

Ask for maintainer fix.
Comment 3 alexander 2005-11-06 17:05:53 UTC 
Hi

> Can you investigate this problem and submit patch?
>
> http://www.freebsd.org/cgi/query-pr.cgi?pr=87606

I fixed this as proposed by the PR. The files installed are now owned by 
root:wheel.
The attached fix also include an update of this port to Version 2.0.2 
(was 2.0.0) and a minor correction to apply the appropriate patch to 
SquirrelMail 1.4.5 (which is the current version in the ports tree) 
during installation.

Alexander Wittig
Comment 4 Marcus Alves Grando freebsd_committer freebsd_triage 2005-11-08 20:01:02 UTC 
State Changed
From-To: feedback->closed

Committed. Thanks!