diff options
| author | Peter Pentchev <roam@FreeBSD.org> | 2001-09-08 10:48:49 +0000 |
|---|---|---|
| committer | Peter Pentchev <roam@FreeBSD.org> | 2001-09-08 10:48:49 +0000 |
| commit | bb8cf40c25593d2e5b3909bcb65916941c96fcaa (patch) | |
| tree | be3d97a77de75169b9105c2ffd06c4fbe6133ebb /mail/vpopmail-stable/Makefile | |
| parent | df36eba4c3a41ac04abe46f38da443be0484b150 (diff) | |
| download | ports-bb8cf40c25593d2e5b3909bcb65916941c96fcaa.tar.gz ports-bb8cf40c25593d2e5b3909bcb65916941c96fcaa.zip | |
Turn off world-readability on the directories holding the executable
binaries and libraries of vpopmail. This prevents arbitrary users
from obtaining the username and password for access to the MySQL database,
which are present in plaintext in the vpopmail object files and binaries.
Obtained from: Bugtraq
Notes
Notes:
svn path=/head/; revision=47534
Diffstat (limited to 'mail/vpopmail-stable/Makefile')
| -rw-r--r-- | mail/vpopmail-stable/Makefile | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/mail/vpopmail-stable/Makefile b/mail/vpopmail-stable/Makefile index 09f3db073de6..8334d2f22145 100644 --- a/mail/vpopmail-stable/Makefile +++ b/mail/vpopmail-stable/Makefile @@ -7,7 +7,7 @@ PORTNAME= vpopmail PORTVERSION= 4.9.10 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= mail MASTER_SITES= http://www.inter7.com/vpopmail/ @@ -129,4 +129,7 @@ pre-configure: .endif .endif +post-install: + ${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib + .include <bsd.port.mk> |