diff options
author | Johann Visagie <wjv@FreeBSD.org> | 2002-05-09 12:50:27 +0000 |
---|---|---|
committer | Johann Visagie <wjv@FreeBSD.org> | 2002-05-09 12:50:27 +0000 |
commit | ab116ec2b925f0082ab053119485471f53dcc6fe (patch) | |
tree | eca06882b9de665bced37c0dbbe9b24a6dd44f17 /mail/mailman/pkg-plist | |
parent | b0efa84acf57e198680441da1f347a75bf094d4f (diff) |
- Work around a very obscure but potentially severe security problem.
Should a user...
- use su(1) or sudo to gain root privileges in such a way that his own
environment is maintained, and
- should that user have the variable USERNAME defined in his environment to
point to his own username (not entirely unlikely), and
- should the user install the Mailman port and immediately deinstall it,
... his own userid will be deleted by $PKGDEINSTALL.
The short-term fix implemented here is to munge the names of the variables
used by the port's Makefile.
- Correctly list image directory in $PLIST, even if the user changes it from
the default.
- Add a WITH_APACHE2 knob and document it.
- Bump PORTREVISION
Submitted by: Volker Stolz <vs@lambda.foldr.org> (security issue)
Notes
Notes:
svn path=/head/; revision=58802
Diffstat (limited to 'mail/mailman/pkg-plist')
-rw-r--r-- | mail/mailman/pkg-plist | 11 |
1 files changed, 5 insertions, 6 deletions
diff --git a/mail/mailman/pkg-plist b/mail/mailman/pkg-plist index 1a1cb15ae73b..edb004acb7ab 100644 --- a/mail/mailman/pkg-plist +++ b/mail/mailman/pkg-plist @@ -8,6 +8,10 @@ @exec mkdir -p %D/%%MMDIR%%/logs && chmod 2775 %D/%%MMDIR%%/logs @exec mkdir -p %D/%%MMDIR%%/qfiles && chmod 2775 %D/%%MMDIR%%/qfiles @exec mkdir -p %D/%%MMDIR%%/spam && chmod 2775 %D/%%MMDIR%%/spam +%%IMGDIR%%/PythonPowered.png +%%IMGDIR%%/gnu-head-tiny.jpg +%%IMGDIR%%/mailman.jpg +%%IMGDIR%%/powerlogo.gif %%MMDIR%%/Mailman/Archiver/Archiver.py %%MMDIR%%/Mailman/Archiver/Archiver.pyc %%MMDIR%%/Mailman/Archiver/HyperArch.py @@ -297,10 +301,6 @@ %%PORTDOCS%%share/doc/mailman/README.QMAIL %%PORTDOCS%%share/doc/mailman/README.SENDMAIL %%PORTDOCS%%share/doc/mailman/UPGRADING -www/icons/PythonPowered.png -www/icons/gnu-head-tiny.jpg -www/icons/mailman.jpg -www/icons/powerlogo.gif @dirrm %%MMDIR%%/templates @dirrm %%MMDIR%%/scripts @dirrm %%MMDIR%%/mail @@ -317,8 +317,6 @@ www/icons/powerlogo.gif @dirrm %%MMDIR%%/Mailman/Bouncers @dirrm %%MMDIR%%/Mailman/Archiver %%PORTDOCS%%@dirrm share/doc/mailman -@unexec rmdir %D/www/icons 2>/dev/null || true -@unexec rmdir %D/www 2>/dev/null || true @unexec rmdir %D/%%MMDIR%%/spam 2>/dev/null || true @unexec rmdir %D/%%MMDIR%%/qfiles 2>/dev/null || true @unexec rmdir %D/%%MMDIR%%/logs 2>/dev/null || true @@ -329,3 +327,4 @@ www/icons/powerlogo.gif @unexec rmdir %D/%%MMDIR%%/archives 2>/dev/null || true @unexec rmdir %D/%%MMDIR%%/Mailman 2>/dev/null || true @unexec rmdir %D/%%MMDIR%%/ 2>/dev/null || true +@unexec rmdir %D/%%IMGDIR%% 2>/dev/null || true |