Subject: pkg/35141: databases/phpmyadmin blindly trusts on www user existance (pkgsrc-current)
To: None <pkg-manager@netbsd.org, gnats-admin@netbsd.org,>
From: Wouter Schoot <ascent@schoot.org>
List: pkgsrc-bugs
Date: 11/27/2006 17:05:00
>Number:         35141
>Category:       pkg
>Synopsis:       databases/phpmyadmin blindly trusts on www user existance
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Nov 27 17:05:00 +0000 2006
>Originator:     Wouter Schoot <ascent@schoot.org>
>Release:        NetBSD 4.99.4
>Organization:

>Environment:
	
	
System: NetBSD gehakt.student.utwente.nl 4.99.4 NetBSD 4.99.4 (GEHAKT) #10: Sat Nov 25 19:53:04 CET 2006 root@gehakt.student.utwente.nl:/usr/src/sys/arch/i386/compile/GEHAKT i386
Architecture: i386
Machine: i386
>Description:
When installing databases/phpmyadmin from pkgsrc-current, it has the apache user
being www hardcoded in the Makefile. I think it should check if that user
exists, and otherwise use some option to set the user. When installing lighttpd
instead of apache (which doesn't create a www user), the chown's in the end
fail.
	
>How-To-Repeat:
	
>Fix:
	

>Unformatted: