kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Turn off world-readability on the directories holding the executable

Browse source 
binaries and libraries of vpopmail.  This prevents arbitrary users
from obtaining the username and password for access to the MySQL database,
which are present in plaintext in the vpopmail object files and binaries.

Obtained from:	Bugtraq
This commit is contained in:
Peter Pentchev 2001-09-08 10:48:49 +00:00
parent df36eba4c3
commit bb8cf40c25
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=47534
3 changed files with 12 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
mail/vpopmail-devel/Makefile
View file

@ -7,7 +7,7 @@
PORTNAME= vpopmail
PORTVERSION= 4.9.10
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= mail
MASTER_SITES= http://www.inter7.com/vpopmail/
@ -129,4 +129,7 @@ pre-configure:
.endif
.endif
post-install:
${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
.include <bsd.port.mk>

5
mail/vpopmail-stable/Makefile
View file

@ -7,7 +7,7 @@
PORTNAME= vpopmail
PORTVERSION= 4.9.10
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= mail
MASTER_SITES= http://www.inter7.com/vpopmail/
@ -129,4 +129,7 @@ pre-configure:
.endif
.endif
post-install:
${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
.include <bsd.port.mk>

5
mail/vpopmail/Makefile
View file

@ -7,7 +7,7 @@
PORTNAME= vpopmail
PORTVERSION= 4.9.10
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= mail
MASTER_SITES= http://www.inter7.com/vpopmail/
@ -129,4 +129,7 @@ pre-configure:
.endif
.endif
post-install:
${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
.include <bsd.port.mk>