mirror of
https://git.FreeBSD.org/ports.git
synced 2024-12-24 04:33:24 +00:00
Turn off world-readability on the directories holding the executable
binaries and libraries of vpopmail. This prevents arbitrary users from obtaining the username and password for access to the MySQL database, which are present in plaintext in the vpopmail object files and binaries. Obtained from: Bugtraq
This commit is contained in:
parent
df36eba4c3
commit
bb8cf40c25
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=47534
@ -7,7 +7,7 @@
|
||||
|
||||
PORTNAME= vpopmail
|
||||
PORTVERSION= 4.9.10
|
||||
PORTREVISION= 1
|
||||
PORTREVISION= 2
|
||||
CATEGORIES= mail
|
||||
MASTER_SITES= http://www.inter7.com/vpopmail/
|
||||
|
||||
@ -129,4 +129,7 @@ pre-configure:
|
||||
.endif
|
||||
.endif
|
||||
|
||||
post-install:
|
||||
${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
|
||||
|
||||
.include <bsd.port.mk>
|
||||
|
@ -7,7 +7,7 @@
|
||||
|
||||
PORTNAME= vpopmail
|
||||
PORTVERSION= 4.9.10
|
||||
PORTREVISION= 1
|
||||
PORTREVISION= 2
|
||||
CATEGORIES= mail
|
||||
MASTER_SITES= http://www.inter7.com/vpopmail/
|
||||
|
||||
@ -129,4 +129,7 @@ pre-configure:
|
||||
.endif
|
||||
.endif
|
||||
|
||||
post-install:
|
||||
${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
|
||||
|
||||
.include <bsd.port.mk>
|
||||
|
@ -7,7 +7,7 @@
|
||||
|
||||
PORTNAME= vpopmail
|
||||
PORTVERSION= 4.9.10
|
||||
PORTREVISION= 1
|
||||
PORTREVISION= 2
|
||||
CATEGORIES= mail
|
||||
MASTER_SITES= http://www.inter7.com/vpopmail/
|
||||
|
||||
@ -129,4 +129,7 @@ pre-configure:
|
||||
.endif
|
||||
.endif
|
||||
|
||||
post-install:
|
||||
${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
|
||||
|
||||
.include <bsd.port.mk>
|
||||
|
Loading…
Reference in New Issue
Block a user