[pkgsrc/pkgsrc-2003Q4]: pkgsrc/comms/mgetty+sendfax Pullup possible security ...

[agc <agc%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/c7c04f1f8b72
branches:  pkgsrc-2003Q4
changeset: 463724:c7c04f1f8b72
user:      agc <agc%pkgsrc.org@localhost>
date:      Tue Dec 30 16:19:32 2003 +0000

description:
Pullup possible security fix to the pkgsrc-2003Q4 branch, requested by
Frederick Bruckman.

        Module Name:  pkgsrc
        Committed By: fredb
        Date:         Sat Dec 20 20:09:50 UTC 2003

        Modified Files:
              pkgsrc/comms/mgetty+sendfax: INSTALL Makefile

        Log Message:
        Don't make the outgoing fax spool directory chmod 1777. Unprivleged users
        are supposed to use "faxspool" to submit faxes for sending, as explained
        by Gert Doering (mgetty's author) on tech-pkg.

diffstat:

 comms/mgetty+sendfax/INSTALL  |  9 +++------
 comms/mgetty+sendfax/Makefile |  6 +++---
 2 files changed, 6 insertions(+), 9 deletions(-)

diffs (50 lines):

diff -r fe960ba3b5c2 -r c7c04f1f8b72 comms/mgetty+sendfax/INSTALL
--- a/comms/mgetty+sendfax/INSTALL      Tue Dec 30 16:17:13 2003 +0000
+++ b/comms/mgetty+sendfax/INSTALL      Tue Dec 30 16:19:32 2003 +0000
@@ -1,6 +1,6 @@
 #!/bin/sh
 #
-# $NetBSD: INSTALL,v 1.4 2003/08/30 20:22:50 jlam Exp $
+# $NetBSD: INSTALL,v 1.4.2.1 2003/12/30 16:19:32 agc Exp $
 
 case ${STAGE} in
 POST-INSTALL)
@@ -15,11 +15,8 @@
        fi
        if [ ! -d /var/spool/fax/outgoing ]; then
                ${MKDIR} /var/spool/fax/outgoing
-               ${CHMOD} 1777 /var/spool/fax/outgoing
        fi
-       if [ ! -d /var/spool/fax/outgoing/locks ]; then
-               ${MKDIR} /var/spool/fax/outgoing/locks
-               ${CHMOD} 777 /var/spool/fax/outgoing/locks
-       fi
+       ${CHMOD} 755 /var/spool/fax/outgoing
+       ${CHOWN} fax /var/spool/fax/outgoing
        ;;
 esac
diff -r fe960ba3b5c2 -r c7c04f1f8b72 comms/mgetty+sendfax/Makefile
--- a/comms/mgetty+sendfax/Makefile     Tue Dec 30 16:17:13 2003 +0000
+++ b/comms/mgetty+sendfax/Makefile     Tue Dec 30 16:19:32 2003 +0000
@@ -1,9 +1,10 @@
-# $NetBSD: Makefile,v 1.36 2003/10/18 13:08:49 cjep Exp $
+# $NetBSD: Makefile,v 1.36.2.1 2003/12/30 16:19:32 agc Exp $
 # FreeBSD Id: Makefile,v 1.25 1998/07/16 06:44:37 vanilla Exp
 #
 
 DISTNAME=      mgetty1.1.30-Dec16
 PKGNAME=       mgetty-1.1.30
+PKGREVISION=   1
 WRKSRC=                ${WRKDIR}/${PKGNAME_NOREV}
 CATEGORIES=    comms
 MASTER_SITES=  ftp://ftp.leo.org/pub/comp/os/unix/networking/mgetty/ \
@@ -46,8 +47,7 @@
 _EXAMPLES_DIR=         ${PREFIX}/share/examples/mgetty+sendfax
 MAKE_DIRS_PERMS+=      /var/spool/fax ${ROOT_USER} ${ROOT_GROUP} 755
 MAKE_DIRS_PERMS+=      /var/spool/fax/incoming ${ROOT_USER} ${ROOT_GROUP} 755
-MAKE_DIRS_PERMS+=      /var/spool/fax/outgoing ${ROOT_USER} ${ROOT_GROUP} 1777
-MAKE_DIRS_PERMS+=      /var/spool/fax/outgoing/locks ${ROOT_USER} ${ROOT_GROUP} 777
+MAKE_DIRS_PERMS+=      /var/spool/fax/outgoing fax ${ROOT_GROUP} 755
 
 do-configure:
        ${MV} ${WRKSRC}/doc/fax.1in ${WRKSRC}/doc/sendfax.1in