Bug 201929
| Summary: | www/ckeditor: file owner setting problem | ||
|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Dmitry Marakasov <amdmi3> |
| Component: | Individual Port(s) | Assignee: | Dmitry Marakasov <amdmi3> |
| Status: | Closed FIXED | ||
| Severity: | Affects Many People | CC: | joehorn |
| Priority: | --- | Flags: | bugzilla:
maintainer-feedback?
(joehorn) |
| Version: | Latest | ||
| Hardware: | Any | ||
| OS: | Any | ||
A commit references this bug: Author: amdmi3 Date: Thu Sep 3 10:12:18 UTC 2015 New revision: 395943 URL: https://svnweb.freebsd.org/changeset/ports/395943 Log: - Remove CHOWNing of installed files; this was broken with pkg, and doesn't seem needed and in fact is a security problem - Drop @dirrm from plist - Add NO_ARCH PR: 201929 Submitted by: amdmi3 Approved by: maintainer timeout (joehorn@gmail.com, 5 weeks) Changes: head/www/ckeditor/Makefile head/www/ckeditor/pkg-plist |
Since switch to pkg, setting file owner during ckeditor installation was broken: though it tries to set owner via -R${WWWOWN}:${WWWGRP}, it does nothing as pkg resets it to root. Actually, setting owner of all files to www is a security hole. Either you should not try to set owner at all, or owner should be set via plist @owner/@group directives, and only for specific directories, which need to be writable by www.