kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

<security-officer>

Browse source 
Don't install rnews setgid uucp by default - the INN maintainers don't
recommend this binary run with privileges because it is not secure.
Anyone who needs the ability to fetch news via UUCP can rebuild the port
with WITH_UUCP_SECURITY_HOLE defined.
</security-officer>
This commit is contained in:
Kris Kennaway 2000-07-04 05:06:30 +00:00
parent 780b231f2e
commit 4c7124b3db
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=30159
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
news/inn-stable/Makefile
View file

@ -124,8 +124,11 @@ post-install:
.endfor
# drop privs on inews because it is insecure
${CHMOD} 555 ${NEWSLIB}/bin/inews
.if defined(WITH_UUCP_SECURITY_HOLE)
# make rnews work when getting news via uucp !
${CHMOD} 2555 ${NEWSLIB}/bin/rnews
.else
${CHMOD} 555 ${NEWSLIB}/bin/rnews
.endif
.include <bsd.port.mk>