diff options
| author | roam <roam@FreeBSD.org> | 2001-09-08 18:48:49 +0800 |
|---|---|---|
| committer | roam <roam@FreeBSD.org> | 2001-09-08 18:48:49 +0800 |
| commit | 89fdc19c88caf109b06b5faeb9b307eddd024d1e (patch) | |
| tree | 134b3206383fba983f0c590357ea48f34b89f52c /mail/vpopmail-devel/Makefile | |
| parent | 1f7d3bd95b082f0cbb878fbdd6f329051f09e2f7 (diff) | |
| download | freebsd-ports-graphics-89fdc19c88caf109b06b5faeb9b307eddd024d1e.tar.gz freebsd-ports-graphics-89fdc19c88caf109b06b5faeb9b307eddd024d1e.tar.zst freebsd-ports-graphics-89fdc19c88caf109b06b5faeb9b307eddd024d1e.zip | |
Turn off world-readability on the directories holding the executable
binaries and libraries of vpopmail. This prevents arbitrary users
from obtaining the username and password for access to the MySQL database,
which are present in plaintext in the vpopmail object files and binaries.
Obtained from: Bugtraq
Diffstat (limited to 'mail/vpopmail-devel/Makefile')
| -rw-r--r-- | mail/vpopmail-devel/Makefile | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/mail/vpopmail-devel/Makefile b/mail/vpopmail-devel/Makefile index 09f3db073de..8334d2f2214 100644 --- a/mail/vpopmail-devel/Makefile +++ b/mail/vpopmail-devel/Makefile @@ -7,7 +7,7 @@ PORTNAME= vpopmail PORTVERSION= 4.9.10 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= mail MASTER_SITES= http://www.inter7.com/vpopmail/ @@ -129,4 +129,7 @@ pre-configure: .endif .endif +post-install: + ${CHMOD} o-rwx ${PREFIX}/vpopmail/bin ${PREFIX}/vpopmail/lib + .include <bsd.port.mk> |