Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 83456 - glftpd ebuild should protect ftp-data too
Summary: glftpd ebuild should protect ftp-data too
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: SpanKY
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-02-27 06:23 UTC by Henning Schild
Modified: 2005-02-28 15:17 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Henning Schild 2005-02-27 06:23:12 UTC
the ebuild should change /etc/make.conf to countain

CONFIG_PROTECT="/glftpd/etc /glftpd/ftp-data"

or at least it should advise the user to add this line. Otherwise you will loose all password information, laston, oneliner ... So an update without the config protect will seriously damage the server. I had an update, hopefully others also have one ;).
It would be a good idea to add the entry before qmerge because i had the trouble when switching from a hand made install to the ebuild. You can not be sure you do nothing wrong, when you depend on the information portage gives you. Because someone may not use portage in the first place.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-02-27 16:30:38 UTC
why is this installing to /glftpd/ anyway?
Comment 2 Jakub Moc (RETIRED) gentoo-dev 2005-02-28 00:19:43 UTC
No, it is installing into /opt/glftpd and the env.d file has CONFIG_PROTECT=GLROOT/etc
Comment 3 Henning Schild 2005-02-28 02:27:02 UTC
You are right, i forgot to mention that i have set CUSTOMGLROOT="/glftpd". Anyway GLROOT/ftp-data should be protected too. Because you have all your welcome messages, oneliners, lostonline .. information in this folder. Also the default user and the glftpd user would be altered in case of update.
So perhapt env.d file should look like this
CONFIG_PROTECT=GLROOT/etc GLROOT/ftp-data
Comment 4 SpanKY gentoo-dev 2005-02-28 15:17:24 UTC
cat files/glftpd.env.d 
CONFIG_PROTECT="GLROOT/etc GLROOT/ftp-data"