Summary: | sysutils/ganglia-webfrontend maintainer change: simplify permissions in pkg-plist and fix pkg-message.in | ||||||
---|---|---|---|---|---|---|---|
Product: | Ports & Packages | Reporter: | Joseph Mingrone <jrm> | ||||
Component: | Individual Port(s) | Assignee: | Mark Felder <feld> | ||||
Status: | Closed FIXED | ||||||
Severity: | Affects Some People | CC: | feld | ||||
Priority: | --- | Keywords: | patch, security | ||||
Version: | Latest | ||||||
Hardware: | Any | ||||||
OS: | Any | ||||||
Attachments: |
|
Very good, this will fix all the files being owned by WWWOWN which is big security hole waiting to happen :) A commit references this bug: Author: feld Date: Tue Jul 28 18:32:19 UTC 2015 New revision: 393088 URL: https://svnweb.freebsd.org/changeset/ports/393088 Log: Fix file permissions so WWWDIR is not writable by WWWOWN Improve pkg-message notes on setting up Apache and Nginx PR: 201908 Changes: head/sysutils/ganglia-webfrontend/Makefile head/sysutils/ganglia-webfrontend/files/pkg-message.in head/sysutils/ganglia-webfrontend/pkg-plist waiting on a discussion with ports-secteam about pushing this to 2015Q3 A commit references this bug: Author: feld Date: Thu Jul 30 13:40:09 UTC 2015 New revision: 393243 URL: https://svnweb.freebsd.org/changeset/ports/393243 Log: MFH: r393088 Fix file permissions so WWWDIR is not writable by WWWOWN Improve pkg-message notes on setting up Apache and Nginx PR: 201908 Approved by: ports-secteam (with hat) Changes: _U branches/2015Q3/ branches/2015Q3/sysutils/ganglia-webfrontend/Makefile branches/2015Q3/sysutils/ganglia-webfrontend/files/pkg-message.in branches/2015Q3/sysutils/ganglia-webfrontend/pkg-plist |
Created attachment 159292 [details] patch to simplifying permissions in pkg-plist and updates to pkg-message.in