[Bug 203287] security/maia: fix permissions handling

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203287

            Bug ID: 203287
           Summary: security/maia: fix permissions handling
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs at FreeBSD.org
          Reporter: amdmi3 at FreeBSD.org
                CC: ek at purplehat.org
                CC: ek at purplehat.org
             Flags: maintainer-feedback?(ek at purplehat.org)

Created attachment 161309
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=161309&action=edit
Patch

maia chowns its WWWDIR from Makefile. This is broken - owner should be set from
pkg-plist. The patch fixes this.

Actually though, WWWDIR (apart from directories which require write access)
should not be owned by www at all and this is a security problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.