Date: Wed, 17 Feb 2016 22:51:26 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 207209] textproc/kibana4 /usr/local/www/kibana43 ownership and permissions Message-ID: <bug-207209-13-RPeTlHRsjK@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-207209-13@https.bugs.freebsd.org/bugzilla/> References: <bug-207209-13@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D207209 --- Comment #1 from Sergey Kozlov <kozlov.sergey.404@gmail.com> --- Hello, Thanks a lot for the feedback, glad to hear that the port helps you. I can come up with two major problems with letting Kibana write to it's own source files 1) It will brake the deinstallation of the package Because the pkg-plist wo= n't match, maybe there's a possibility to work around that somehow, but I don't have an immediate answer 2) It can make be a security concern because an attacker which can gain con= trol over the node process can then modify the sources to fit his needs Still, there's a part of the functionality which can't be used because of strict permissions to the www/kibana* directory, I need to think about that= for a while. I've seen olgeni@ added himself to the CC list, maybe you have any thoughts= on how to handle that, Jimmy? --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-207209-13-RPeTlHRsjK>