Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 83456

Summary: glftpd ebuild should protect ftp-data too
Product: Gentoo Linux Reporter: Henning Schild <henning>
Component: New packagesAssignee: SpanKY <vapier>
Status: RESOLVED FIXED    
Severity: normal CC: henning
Priority: High    
Version: unspecified   
Hardware: All   
OS: All   
Whiteboard:
Package list:
Runtime testing required: ---

Description Henning Schild 2005-02-27 06:23:12 UTC
the ebuild should change /etc/make.conf to countain

CONFIG_PROTECT="/glftpd/etc /glftpd/ftp-data"

or at least it should advise the user to add this line. Otherwise you will loose all password information, laston, oneliner ... So an update without the config protect will seriously damage the server. I had an update, hopefully others also have one ;).
It would be a good idea to add the entry before qmerge because i had the trouble when switching from a hand made install to the ebuild. You can not be sure you do nothing wrong, when you depend on the information portage gives you. Because someone may not use portage in the first place.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-02-27 16:30:38 UTC
why is this installing to /glftpd/ anyway?
Comment 2 Jakub Moc (RETIRED) gentoo-dev 2005-02-28 00:19:43 UTC
No, it is installing into /opt/glftpd and the env.d file has CONFIG_PROTECT=GLROOT/etc
Comment 3 Henning Schild 2005-02-28 02:27:02 UTC
You are right, i forgot to mention that i have set CUSTOMGLROOT="/glftpd". Anyway GLROOT/ftp-data should be protected too. Because you have all your welcome messages, oneliners, lostonline .. information in this folder. Also the default user and the glftpd user would be altered in case of update.
So perhapt env.d file should look like this
CONFIG_PROTECT=GLROOT/etc GLROOT/ftp-data
Comment 4 SpanKY gentoo-dev 2005-02-28 15:17:24 UTC
cat files/glftpd.env.d 
CONFIG_PROTECT="GLROOT/etc GLROOT/ftp-data"