>Number:         8540
>Category:       bin
>Synopsis:       openssl makefile installs into /etc ..
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people (Utility Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Oct  3 08:05:04 1999
>Last-Modified:
>Originator:     Bill Sommerfeld
>Organization:
	
>Release:        19991001
>Environment:
	
System: NetBSD orchard.arlington.ma.us 1.4 NetBSD 1.4 (ORCHARDII) #54: Sun May 16 10:05:51 EDT 1999 sommerfeld@orchard.arlington.ma.us:/usr/src/sys/arch/i386/compile/ORCHARDII i386


>Description:
	doing build on system with read-only /etc (but writeable
	/usr), a "make build" blew up while installing openssl because
	openssl.cnf failed to install.

	my understanding was that our conventions were that /etc was
	to be left alone by normal "make build", so that one could
	safely do a "make build" on a live system without fear of
	trashing local config changes.
		
>How-To-Repeat:
	on a system with crypto-us or crypto-intl, 

	cp -r /etc /etc.real
	mount -t union -o ro /etc.real /etc
	cd /usr/src
	make build

>Fix:
	delete:

FILES=  openssl.cnf
FILESDIR=/etc/openssl

from makefile, and add an equivalent to a to-be-created
crypto-*/etc/Makefile.frag.
>Audit-Trail:
>Unformatted: