ports/84002: Aide clobbers /usr/local/etc/aide.conf

[Lupe Christoph]

>Number:         84002
>Category:       ports
>Synopsis:       Aide clobbers /usr/local/etc/aide.conf
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Jul 24 14:10:02 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Lupe Christoph
>Release:        FreeBSD 4.10-RELEASE-p5 i386
>Organization:
>Environment:
System: FreeBSD firewally.lupe-christoph.de 4.10-RELEASE-p5 FreeBSD 4.10-RELEASE-p5 #2: Sat Dec 11 17:38:51 CET 2004 lupe at firewally.lupe-christoph.de:/usr/obj/usr/src/sys/FIREWALLY i386


	
>Description:
	Because of a typo, upgrading aide will clobber it's
	configuration file, potentially compromising security
>How-To-Repeat:
	Install aide. Change /usr/local/etc/aide.conf. Reinstall.
>Fix:

--- aide.patch begins here ---
--- Makefile.orig	Sat May 14 03:28:48 2005
+++ Makefile	Sun Jul 24 15:58:22 2005
@@ -44,7 +44,7 @@
 
 post-install:
 	@${INSTALL_DATA} ${FILESDIR}/aide.conf.freebsd ${PREFIX}/etc/aide.conf.sample
-	@if [ ! -d ${PREFIX}/etc/aide.conf ]; then \
+	@if [ ! -f ${PREFIX}/etc/aide.conf ]; then \
 		${INSTALL_DATA} ${FILESDIR}/aide.conf.freebsd ${PREFIX}/etc/aide.conf ; \
 	fi
 	@if [ ! -d /var/db/aide/databases ]; then \
--- aide.patch ends here ---


>Release-Note:
>Audit-Trail:
>Unformatted: