Subject: pkg/35141: databases/phpmyadmin blindly trusts on www user existance (pkgsrc-current)
To: None <pkg-manager@netbsd.org, gnats-admin@netbsd.org,>
From: Wouter Schoot <ascent@schoot.org>
List: pkgsrc-bugs
Date: 11/27/2006 17:05:00
>Number: 35141
>Category: pkg
>Synopsis: databases/phpmyadmin blindly trusts on www user existance
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: pkg-manager
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Mon Nov 27 17:05:00 +0000 2006
>Originator: Wouter Schoot <ascent@schoot.org>
>Release: NetBSD 4.99.4
>Organization:
>Environment:
System: NetBSD gehakt.student.utwente.nl 4.99.4 NetBSD 4.99.4 (GEHAKT) #10: Sat Nov 25 19:53:04 CET 2006 root@gehakt.student.utwente.nl:/usr/src/sys/arch/i386/compile/GEHAKT i386
Architecture: i386
Machine: i386
>Description:
When installing databases/phpmyadmin from pkgsrc-current, it has the apache user
being www hardcoded in the Makefile. I think it should check if that user
exists, and otherwise use some option to set the user. When installing lighttpd
instead of apache (which doesn't create a www user), the chown's in the end
fail.
>How-To-Repeat:
>Fix:
>Unformatted: