svn commit: r420738 - head/java/wildfly100

Jimmy Olgeni olgeni at FreeBSD.org
Tue Aug 23 20:20:01 UTC 2016


On Tue, 23 Aug 2016, Mathieu Arnold wrote:

> +--On 23 août 2016 19:33:15 +0000 Jimmy Olgeni <olgeni at FreeBSD.org> wrote:
> | Author: olgeni
> | Date: Tue Aug 23 19:33:15 2016
> | New Revision: 420738
> | URL: https://svnweb.freebsd.org/changeset/ports/420738
> | 
> | Log:
> |   Add missing @dir entries to fix directory ownerships.
> 
> Do the app really need to be able to write in all those directories ?  It
> feels very bad security-wise.
> 
> A web app may need to write to its configuration file, and one or two data
> directory, yes, but all the files and directories, really ?

Good point - now it is coherent but it might have been overkill from 
the beginning. Let me check this out.

-- 
jimmy


More information about the svn-ports-all mailing list