Bug 282019 - www/caldavzap: config.js changes trigger a security alert in system emails
Summary: www/caldavzap: config.js changes trigger a security alert in system emails
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Pietro Cerutti
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-10-11 22:23 UTC by pradeep.michchi
Modified: 2024-10-15 09:42 UTC (History)
1 user (show)

See Also:
linimon: maintainer-feedback? (gahr)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description pradeep.michchi 2024-10-11 22:23:20 UTC
config.js is the configuration file for Caldavzap. But the changes trigger a checksum mismatch error in security emails.

Suggest to change this to config.js.dist so it doesn't get updated during a new version or trigger the security checksum.
Comment 1 Pietro Cerutti freebsd_committer freebsd_triage 2024-10-14 13:31:03 UTC
I'm sorry, I've tried very hard to parse this bug report, but I failed.

Can you please to explain in other words what the issue at hand is?
Comment 2 pradeep.michchi 2024-10-15 06:37:18 UTC
(In reply to Pietro Cerutti from comment #1)

I have installed caldavzap from ports.

As part of the installation I have to change the config.js file.

Once I changed this file, the security email from the server sends out this:

Checking for packages with security vulnerabilities:

Checking for packages with mismatched checksums:
caldavzap-0.13.1_1: /usr/local/www/caldavzap/config.js

-- End of security output --


I am guessing, if the ports include config.js.dist rather than the config.js file then this security notification can be avoided.
Comment 3 Pietro Cerutti freebsd_committer freebsd_triage 2024-10-15 07:34:50 UTC
Thanks! All clear now. Good idea, let me work on it!
Comment 4 commit-hook freebsd_committer freebsd_triage 2024-10-15 09:42:08 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=d08bbb8a54cebdec05b740e31f6d909b16c10215

commit d08bbb8a54cebdec05b740e31f6d909b16c10215
Author:     Pietro Cerutti <gahr@FreeBSD.org>
AuthorDate: 2024-10-15 08:21:39 +0000
Commit:     Pietro Cerutti <gahr@FreeBSD.org>
CommitDate: 2024-10-15 09:41:49 +0000

    www/caldavzap: install config file as a @sample

    PR:             282019
    Reported by:    pradeep.michchi@gmail.com

 www/caldavzap/Makefile  | 3 ++-
 www/caldavzap/pkg-plist | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)