pkg/35141: databases/phpmyadmin blindly trusts on www user existance (pkgsrc-current)

[Wouter Schoot <ascent%schoot.org@localhost>]

>Number:         35141
>Category:       pkg
>Synopsis:       databases/phpmyadmin blindly trusts on www user existance
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Nov 27 17:05:00 +0000 2006
>Originator:     Wouter Schoot <ascent%schoot.org@localhost>
>Release:        NetBSD 4.99.4
>Organization:

>Environment:
        
        
System: NetBSD gehakt.student.utwente.nl 4.99.4 NetBSD 4.99.4 (GEHAKT) #10: Sat 
Nov 25 19:53:04 CET 2006 
root%gehakt.student.utwente.nl@localhost:/usr/src/sys/arch/i386/compile/GEHAKT 
i386
Architecture: i386
Machine: i386
>Description:
When installing databases/phpmyadmin from pkgsrc-current, it has the apache user
being www hardcoded in the Makefile. I think it should check if that user
exists, and otherwise use some option to set the user. When installing lighttpd
instead of apache (which doesn't create a www user), the chown's in the end
fail.
        
>How-To-Repeat:
        
>Fix:
        

>Unformatted: