mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-25 04:43:33 +00:00
Code Issues Releases Activity

Work around a very obscure but potentially severe security problem.

Browse Source 
The user can have the variables OWNCLOUD_USERNAME and OWNCLOUD_GROUPNAME
defined in his environment to point to his own username and groupname.

Suggested by:	Adam McDougall
This commit is contained in:
Kevin Lo 2014-03-12 02:04:03 +00:00
parent 59721d841a
commit fc1783f996
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=347952
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
www/owncloud/Makefile
View File

@ -2,6 +2,7 @@
PORTNAME= owncloud
PORTVERSION= 6.0.2
PORTREVISION= 1
CATEGORIES= www
MASTER_SITES= http://download.owncloud.org/community/
@ -19,9 +20,14 @@ USE_PHP= bz2 ctype curl dom exif fileinfo filter gd hash iconv json \
xsl wddx zip zlib
WANT_PHP_WEB= yes
OWNCLOUD_USERNAME?= www
OWNCLOUD_GROUPNAME?= ${OWNCLOUD_USERNAME}
WRKSRC= ${WRKDIR}/${PORTNAME}
NO_BUILD= yes
SUB_FILES= pkg-message
PLIST_SUB= OWNCLOUD_USERNAME=${OWNCLOUD_USERNAME} \
OWNCLOUD_GROUPNAME=${OWNCLOUD_GROUPNAME}
OPTIONS_MULTI= DB
OPTIONS_MULTI_DB= MYSQL PGSQL SQLITE

4
www/owncloud/pkg-plist
View File

@ -1,5 +1,5 @@
@owner www
@group www
@owner %%OWNCLOUD_USERNAME%%
@group %%OWNCLOUD_GROUPNAME%%
%%WWWDIR%%/.htaccess
%%WWWDIR%%/3rdparty/Archive/Tar.php
%%WWWDIR%%/3rdparty/Console/Getopt.php