Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 28868

Summary: phpmyadmin's ebuild changes request
Product: Gentoo Linux Reporter: Julien Allanos (RETIRED) <dju>
Component: New packagesAssignee: Gentoo Web Application Packages Maintainers <web-apps>
Status: RESOLVED FIXED    
Severity: normal CC: twp
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Julien Allanos (RETIRED) gentoo-dev 2003-09-16 04:42:04 UTC
1- I'm considering phpmyadmin's config file (/etc/phpmyadmin/config.php) is
installed with permissions that could be a security risk. It shouldn't be
world-readable, in case the 'config' authentication mode is chosen. I suggest
chmoding it 640 and chgrping to apache :

       insopts -g apache -m 640
       doins config.inc.php mysql-setup.sql

2- The mysql-setup.sql file is copied twice with the present ebuild : once in
/etc/phpmyadmin/ and once in /home/httpd/htdocs/phpmyadmin/. I suggest deleting
the second one at the end of the src_install () function :

        rm ${D}${destdir}/mysql-setup.sql
Comment 1 Tom Payne (RETIRED) gentoo-dev 2003-09-17 04:11:23 UTC
This is a good idea. Implemented and in CVS.

Note however the etc-update bug (bug # 28962) that makes updating messy.