1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-24 04:33:24 +00:00

Turn off world-readability on the directories holding the executable

binaries and libraries of vpopmail.  This prevents arbitrary users
from obtaining the username and password for access to the MySQL database,
which are present in plaintext in the vpopmail object files and binaries.

Obtained from:	Bugtraq
This commit is contained in:
Peter Pentchev 2001-09-08 10:48:49 +00:00
parent df36eba4c3
commit bb8cf40c25
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=47534
3 changed files with 12 additions and 3 deletions

View File

@ -7,7 +7,7 @@
PORTNAME= vpopmail
PORTVERSION= 4.9.10
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= mail
MASTER_SITES= http://www.inter7.com/vpopmail/
@ -129,4 +129,7 @@ pre-configure:
.endif
.endif
post-install:
${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
.include <bsd.port.mk>

View File

@ -7,7 +7,7 @@
PORTNAME= vpopmail
PORTVERSION= 4.9.10
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= mail
MASTER_SITES= http://www.inter7.com/vpopmail/
@ -129,4 +129,7 @@ pre-configure:
.endif
.endif
post-install:
${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
.include <bsd.port.mk>

View File

@ -7,7 +7,7 @@
PORTNAME= vpopmail
PORTVERSION= 4.9.10
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= mail
MASTER_SITES= http://www.inter7.com/vpopmail/
@ -129,4 +129,7 @@ pre-configure:
.endif
.endif
post-install:
${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
.include <bsd.port.mk>