Bug 201908

Summary: sysutils/ganglia-webfrontend maintainer change: simplify permissions in pkg-plist and fix pkg-message.in
Product: Ports & Packages Reporter: Joseph Mingrone <jrm>
Component: Individual Port(s)Assignee: Mark Felder <feld>
Status: Closed FIXED    
Severity: Affects Some People CC: feld
Priority: --- Keywords: patch, security
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
patch to simplifying permissions in pkg-plist and updates to pkg-message.in none

Description Joseph Mingrone freebsd_committer freebsd_triage 2015-07-27 01:50:32 UTC
Created attachment 159292 [details]
patch to simplifying permissions in pkg-plist and updates to pkg-message.in
Comment 1 Mark Felder freebsd_committer freebsd_triage 2015-07-28 18:20:46 UTC
Very good, this will fix all the files being owned by WWWOWN which is big security hole waiting to happen :)
Comment 2 commit-hook freebsd_committer freebsd_triage 2015-07-28 18:33:10 UTC
A commit references this bug:

Author: feld
Date: Tue Jul 28 18:32:19 UTC 2015
New revision: 393088
URL: https://svnweb.freebsd.org/changeset/ports/393088

Log:
  Fix file permissions so WWWDIR is not writable by WWWOWN
  Improve pkg-message notes on setting up Apache and Nginx

  PR:	201908

Changes:
  head/sysutils/ganglia-webfrontend/Makefile
  head/sysutils/ganglia-webfrontend/files/pkg-message.in
  head/sysutils/ganglia-webfrontend/pkg-plist
Comment 3 Mark Felder freebsd_committer freebsd_triage 2015-07-28 18:51:33 UTC
waiting on a discussion with ports-secteam about pushing this to 2015Q3
Comment 4 commit-hook freebsd_committer freebsd_triage 2015-07-30 13:40:45 UTC
A commit references this bug:

Author: feld
Date: Thu Jul 30 13:40:09 UTC 2015
New revision: 393243
URL: https://svnweb.freebsd.org/changeset/ports/393243

Log:
  MFH: r393088

  Fix file permissions so WWWDIR is not writable by WWWOWN
  Improve pkg-message notes on setting up Apache and Nginx

  PR:	201908
  Approved by:	ports-secteam (with hat)

Changes:
_U  branches/2015Q3/
  branches/2015Q3/sysutils/ganglia-webfrontend/Makefile
  branches/2015Q3/sysutils/ganglia-webfrontend/files/pkg-message.in
  branches/2015Q3/sysutils/ganglia-webfrontend/pkg-plist