summaryrefslogtreecommitdiffstats
path: root/mail
diff options
context:
space:
mode:
authorroam <roam@FreeBSD.org>2001-09-08 10:48:49 +0000
committerroam <roam@FreeBSD.org>2001-09-08 10:48:49 +0000
commit89fdc19c88caf109b06b5faeb9b307eddd024d1e (patch)
tree134b3206383fba983f0c590357ea48f34b89f52c /mail
parent1f7d3bd95b082f0cbb878fbdd6f329051f09e2f7 (diff)
downloadFreeBSD-ports-89fdc19c88caf109b06b5faeb9b307eddd024d1e.zip
FreeBSD-ports-89fdc19c88caf109b06b5faeb9b307eddd024d1e.tar.gz
Turn off world-readability on the directories holding the executable
binaries and libraries of vpopmail. This prevents arbitrary users from obtaining the username and password for access to the MySQL database, which are present in plaintext in the vpopmail object files and binaries. Obtained from: Bugtraq
Diffstat (limited to 'mail')
-rw-r--r--mail/vpopmail-devel/Makefile5
-rw-r--r--mail/vpopmail-stable/Makefile5
-rw-r--r--mail/vpopmail/Makefile5
3 files changed, 12 insertions, 3 deletions
diff --git a/mail/vpopmail-devel/Makefile b/mail/vpopmail-devel/Makefile
index 09f3db0..8334d2f 100644
--- a/mail/vpopmail-devel/Makefile
+++ b/mail/vpopmail-devel/Makefile
@@ -7,7 +7,7 @@
PORTNAME= vpopmail
PORTVERSION= 4.9.10
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= mail
MASTER_SITES= http://www.inter7.com/vpopmail/
@@ -129,4 +129,7 @@ pre-configure:
.endif
.endif
+post-install:
+ ${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
+
.include <bsd.port.mk>
diff --git a/mail/vpopmail-stable/Makefile b/mail/vpopmail-stable/Makefile
index 09f3db0..8334d2f 100644
--- a/mail/vpopmail-stable/Makefile
+++ b/mail/vpopmail-stable/Makefile
@@ -7,7 +7,7 @@
PORTNAME= vpopmail
PORTVERSION= 4.9.10
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= mail
MASTER_SITES= http://www.inter7.com/vpopmail/
@@ -129,4 +129,7 @@ pre-configure:
.endif
.endif
+post-install:
+ ${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
+
.include <bsd.port.mk>
diff --git a/mail/vpopmail/Makefile b/mail/vpopmail/Makefile
index 09f3db0..8334d2f 100644
--- a/mail/vpopmail/Makefile
+++ b/mail/vpopmail/Makefile
@@ -7,7 +7,7 @@
PORTNAME= vpopmail
PORTVERSION= 4.9.10
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= mail
MASTER_SITES= http://www.inter7.com/vpopmail/
@@ -129,4 +129,7 @@ pre-configure:
.endif
.endif
+post-install:
+ ${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib
+
.include <bsd.port.mk>
OpenPOWER on IntegriCloud