Re: pkg/35141: databases/phpmyadmin blindly trusts on www user existance (pkgsrc-current)

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

The following reply was made to PR pkg/35141; it has been noted by GNATS.

From: Joerg Sonnenberger <joerg%britannica.bec.de@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/35141: databases/phpmyadmin blindly trusts on www user
 existance (pkgsrc-current)
Date: Mon, 27 Nov 2006 18:36:11 +0100

 On Mon, Nov 27, 2006 at 05:05:00PM +0000, Wouter Schoot wrote:
 > When installing databases/phpmyadmin from pkgsrc-current, it has the apache 
 > user
 > being www hardcoded in the Makefile. I think it should check if that user
 > exists, and otherwise use some option to set the user. When installing 
 > lighttpd
 > instead of apache (which doesn't create a www user), the chown's in the end
 > fail.
 
 Are you refering to the configuration file? For what reason is that 0600
 anyway? The default at least makes sense only for mod_php usage and no
 sense for FastCGI setups.
 
 Joerg