From lars.eggert@gmx.net  Wed Oct 12 12:42:30 2005
Return-Path: <lars.eggert@gmx.net>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6A57716A445
	for <FreeBSD-gnats-submit@freebsd.org>; Wed, 12 Oct 2005 12:42:30 +0000 (GMT)
	(envelope-from lars.eggert@gmx.net)
Received: from smtp0.netlab.nec.de (smtp0.netlab.nec.de [195.37.70.40])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5D1DF43D46
	for <FreeBSD-gnats-submit@freebsd.org>; Wed, 12 Oct 2005 12:42:29 +0000 (GMT)
	(envelope-from lars.eggert@gmx.net)
Received: from venus.office (chiba.netlab.nec.de [10.1.1.25])
	by smtp0.netlab.nec.de (Postfix) with ESMTP id 873D9DC40;
	Wed, 12 Oct 2005 14:42:27 +0200 (CEST)
Received: from n-eggert.office ([10.1.1.112]) by venus.office over TLS secured channel with Microsoft SMTPSVC(6.0.3790.1830);
	 Wed, 12 Oct 2005 14:42:27 +0200
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by n-eggert.office (Postfix) with ESMTP id B930933DE5A;
	Wed, 12 Oct 2005 14:42:27 +0200 (CEST)
Message-Id: <43DB271B-E43A-40A5-9DF5-774864F77204@gmx.net>
Date: Wed, 12 Oct 2005 14:42:25 +0200
From: Lars Eggert <lars.eggert@gmx.net>
To: Denis Shaposhnikov <dsh@vlink.ru>
Cc: FreeBSD-gnats-submit@freebsd.org, dsh@neva.vlink.ru
In-Reply-To: <200510121127.j9CBRSuE041463@neva.vlink.ru>
Subject: Re: Update port: www/jwchat (fix permissions)
References: <200510121127.j9CBRSuE041463@neva.vlink.ru>

>Number:         87320
>Category:       ports
>Synopsis:       Re: Update port: www/jwchat (fix permissions)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Oct 12 12:50:14 GMT 2005
>Closed-Date:    Wed Oct 12 16:32:08 GMT 2005
>Last-Modified:  Wed Oct 12 16:32:08 GMT 2005
>Originator:     
>Release:        
>Organization:
>Environment:
>Description:
 --Apple-Mail-5-489890815
 Content-Transfer-Encoding: 7bit
 Content-Type: text/plain;
 	charset=US-ASCII;
 	delsp=yes;
 	format=flowed
 
 Fix is good and can be committed. Thanks!
 
 On Oct 12, 2005, at 13:27, Denis Shaposhnikov wrote:
 >
 >> Submitter-Id:    current-users
 >> Originator:    Denis Shaposhnikov
 >> Organization:
 >> Confidential:    no
 >> Synopsis:    Update port: www/jwchat (fix permissions)
 >> Severity:    non-critical
 >> Priority:    low
 >> Category:    ports
 >> Class:        change-request
 >> Release:    FreeBSD 7.0-CURRENT i386
 >> Environment:
 >>
 > System: FreeBSD neva.vlink.ru 7.0-CURRENT FreeBSD 7.0-CURRENT #21:  
 > Sun Aug 14 15:59:53 MSD 2005 dsh@neva.vlink.ru:/var/FreeBSD/obj/var/ 
 > FreeBSD/src/sys/NEVA i386
 >
 >> Description:
 >
 > The port gives RW permissions for installed files to www user. I think
 > that it's insecure solution. This patch fixes it.
 >
 >> How-To-Repeat:
 >
 >   cd /usr/ports/www && make install
 >   ls -l /usr/local/www/jwchat
 >
 >> Fix:
 >
 > diff -Nru jwchat.orig/Makefile jwchat/Makefile
 > --- jwchat.orig/Makefile    Wed Oct 12 15:22:14 2005
 > +++ jwchat/Makefile    Wed Oct 12 14:24:01 2005
 > @@ -25,12 +25,13 @@
 >
 >  do-install:
 >      ${MKDIR} ${PREFIX}/www ${DATADIR}
 > -    ${CP} ${WRKSRC}/config.js ${DATADIR}
 > +    ${INSTALL_DATA} ${WRKSRC}/config.js ${DATADIR}
 >      ${MV} ${WRKSRC}/config.js ${WRKSRC}/config.js.sample
 >      ${CP} -R ${WRKSRC}/ ${PREFIX}/www/${PORTNAME}
 >      [ ! -f ${PREFIX}/www/${PORTNAME}/config.js ] && \
 >          ${CP} ${DATADIR}/config.js ${PREFIX}/www/${PORTNAME}/ 
 > config.js || true
 > -    ${CHOWN} -R ${WWWOWN}:${WWWGRP} ${PREFIX}/www/${PORTNAME}
 > +    ${FIND} ${PREFIX}/www/${PORTNAME} ! -name config.js -print0  |  
 > ${XARGS} -0 ${CHOWN} ${SHAREOWN}:${SHAREGRP}
 > +    ${FIND} ${PREFIX}/www/${PORTNAME} -type f -and ! -name  
 > config.js -print0 -type f | ${XARGS} -0 ${CHMOD} ${SHAREMODE}
 >
 >  post-install:
 >      @${CAT} ${PKGMESSAGE}
 
 Lars
 --
 Lars Eggert                                     NEC Network Laboratories
 
 
 --Apple-Mail-5-489890815
 Content-Transfer-Encoding: base64
 Content-Type: application/pkcs7-signature;
 	name=smime.p7s
 Content-Disposition: attachment;
 	filename=smime.p7s
 
 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIHKDCCAz8w
 ggKooAMCAQICAQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0
 ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcx
 KDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0
 ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxA
 dGhhd3RlLmNvbTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpB
 MSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUg
 UGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA
 xKY8VXNV+065yplaHmjAdQRwnd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7d
 yfArhVqqP3FWy688Cwfn8R+RNiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/
 p7bRPGEEQB5kGXJgt/sCAwEAAaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDow
 OKA2oDSGMmh0dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3Js
 MAsGA1UdDwQEAwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgw
 DQYJKoZIhvcNAQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A
 9BxQIJNwPP2t4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYI
 Tq726jTlEBpbNU1341YheILcIRk13iSx0x1G/11fZU8wggPhMIIDSqADAgECAgMO8MUwDQYJKoZI
 hvcNAQEEBQAwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkp
 IEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA1
 MDYxNzA3MzQzM1oXDTA2MDYxNzA3MzQzM1owgfMxDzANBgNVBAQTBkVnZ2VydDENMAsGA1UEKhME
 TGFyczEUMBIGA1UEAxMLTGFycyBFZ2dlcnQxIzAhBgkqhkiG9w0BCQEWFGxhcnMuZWdnZXJ0QGll
 ZWUub3JnMSIwIAYJKoZIhvcNAQkBFhNsYXJzLmVnZ2VydEBhY20ub3JnMSgwJgYJKoZIhvcNAQkB
 FhlsYXJzLmVnZ2VydEBuZXRsYWIubmVjLmRlMSIwIAYJKoZIhvcNAQkBFhNsYXJzLmVnZ2VydEBn
 bXgubmV0MSQwIgYJKoZIhvcNAQkBFhVlZ2dlcnRAYWx1bW5pLnVzYy5lZHUwggEiMA0GCSqGSIb3
 DQEBAQUAA4IBDwAwggEKAoIBAQCl+oudGX8XAtHhDH8R09G04C+RbQFvmG1Ctau5/8a3cuIuFcWH
 8qPmxWpsIcvZR0MQ6r8Q7sPQXV5QFQKw1KijyHXF3TK2qZAl61b7keOYVFThYY6adgZyFDUTrx5E
 uLkpdZyzZ6ODk72OZFbOSFXBcgw5P5keVwDoeoi4Wb+XkZq6dTlqQD18j0UJAGdHTU6FXbzv5uzn
 ClKuUX3MOkYBa05zVCT+0uJc5hPtEIpAk0y9GRLoDjvliDKnlOvZEKje0eT/AR0CmwO8ghcW6wlQ
 JUWpakfoKV5CWoIfimEn0R2pD+ggmpbRwQ4BYfpFMnMFej7mFmOnbQZMHr7OtgmhAgMBAAGjgY4w
 gYswewYDVR0RBHQwcoEUbGFycy5lZ2dlcnRAaWVlZS5vcmeBE2xhcnMuZWdnZXJ0QGFjbS5vcmeB
 GWxhcnMuZWdnZXJ0QG5ldGxhYi5uZWMuZGWBE2xhcnMuZWdnZXJ0QGdteC5uZXSBFWVnZ2VydEBh
 bHVtbmkudXNjLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAFAOwi4S0MKEr6LQ
 olKerPDcwpkbtgOrCopWBtATDr+ifk57LFpGiYTrWbfsSogIQbM2EUO91bpZvSaaMMim/0ChtAFb
 Md4l/L22fol1SkbwGvG1Q/Y6e7yVaswykhK/BLgzT6IEyREIPd/rX44m1SOXX8xM5tmxQeANXdbp
 w5YAMYIC5zCCAuMCAQEwaTBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRp
 bmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3Vpbmcg
 Q0ECAw7wxTAJBgUrDgMCGgUAoIIBUzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3
 DQEJBTEPFw0wNTEwMTIxMjQyMjZaMCMGCSqGSIb3DQEJBDEWBBTGxuMQZl0zIOU9wi+yXIGY1oHR
 kDB4BgkrBgEEAYI3EAQxazBpMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3Vs
 dGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWlu
 ZyBDQQIDDvDFMHoGCyqGSIb3DQEJEAILMWugaTBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhh
 d3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVt
 YWlsIElzc3VpbmcgQ0ECAw7wxTANBgkqhkiG9w0BAQEFAASCAQAr08lbJmbBbn/hxMJOPR7BKA5x
 9A6jv4Ufmf3DkNLfltYP1vUYUieTOjMbOqsyHIgZdqmTotHeRrpHypkz2eEYld+h4i/494RNfG9V
 ty2LIYMQ1WPRKXbJhrVBw93LBzZjHGSa/MaH9vBYQo7D+8GbbCpeO/dJCqCSKwxefW8Dq6Igoamq
 PJsPUJ2PEqIv32JU77ft8Ic3yN+xSorSuIaTPH6a8Gj74vOZnv7YlgC0Cwgtz/FI+ErDGvzCrd35
 4Fp5uS7+nJcgbkdMdIlKv9/rlfeR6qOqREYC+ofz++iJaBvfKOd7q8y4oElaHkXYnTycbQEowH2C
 Y53xtb31B11iAAAAAAAA
 
 --Apple-Mail-5-489890815--
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: linimon 
State-Changed-When: Wed Oct 12 16:31:34 GMT 2005 
State-Changed-Why:  
Misfiled followup to ports/87317; content migrated. 


Responsible-Changed-From-To: gnats-admin->freebsd-ports-bugs 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Wed Oct 12 16:31:34 GMT 2005 
Responsible-Changed-Why:  

http://www.freebsd.org/cgi/query-pr.cgi?pr=87320 
>Unformatted:
