The following reply was made to PR pkg/35141; it has been noted by GNATS.

From: Joerg Sonnenberger <joerg@britannica.bec.de>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: pkg/35141: databases/phpmyadmin blindly trusts on www user
 existance (pkgsrc-current)
Date: Mon, 27 Nov 2006 18:36:11 +0100

 On Mon, Nov 27, 2006 at 05:05:00PM +0000, Wouter Schoot wrote:
 > When installing databases/phpmyadmin from pkgsrc-current, it has the apache user
 > being www hardcoded in the Makefile. I think it should check if that user
 > exists, and otherwise use some option to set the user. When installing lighttpd
 > instead of apache (which doesn't create a www user), the chown's in the end
 > fail.
 
 Are you refering to the configuration file? For what reason is that 0600
 anyway? The default at least makes sense only for mod_php usage and no
 sense for FastCGI setups.
 
 Joerg