From owner-freebsd-ports  Fri Dec  7  6:10: 7 2001
Delivered-To: freebsd-ports@hub.freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 6000237B417
	for <freebsd-ports@hub.freebsd.org>; Fri,  7 Dec 2001 06:10:01 -0800 (PST)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id fB7EA1l91285;
	Fri, 7 Dec 2001 06:10:01 -0800 (PST)
	(envelope-from gnats)
Date: Fri, 7 Dec 2001 06:10:01 -0800 (PST)
Message-Id: <200112071410.fB7EA1l91285@freefall.freebsd.org>
To: freebsd-ports@FreeBSD.org
Cc: 
From: Jun Kuriyama <kuriyama@imgsrc.co.jp>
Subject: Re: ports/32536: apache13+mod_ssl deletes www user on pkg_delete
Reply-To: Jun Kuriyama <kuriyama@imgsrc.co.jp>
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ports.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ports>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ports>
X-Loop: FreeBSD.org

The following reply was made to PR ports/32536; it has been noted by GNATS.

From: Jun Kuriyama <kuriyama@imgsrc.co.jp>
To: ache@FreeBSD.org
Cc: Vivek Khera <khera@kciLink.com>
Subject: Re: ports/32536: apache13+mod_ssl deletes www user on pkg_delete
Date: Fri, 07 Dec 2001 23:07:11 +0900

 Ache, what do you think about this?
 
 At Wed, 5 Dec 2001 17:00:10 +0000 (UTC),
 Vivek Khera wrote:
 > In a *major* violation of POLA, when I went to upgrade apache +
 > mod_ssl the other day, it removed and then recreated the www user
 > account.  However, the UID changed from what it was, the home dir
 > changed, login class changed, and group memberships were lost.
 > Bascially, it screwed my environment.  Luckily, it was only a
 > development server, and it asked me before deleting the crontab file.
 > 
 > What is the point of unilaterally deleting the existing www user
 > account on deletion of the package?  It just seems wrong.
 > 
 > As a reference, the mail/postfix-current port uses a "postfix" user
 > account, yet doesn't delete it when the package is deleted.  This
 > makes for easy upgrades.  At worst, it should ask if the user should
 > be deleted.
 
 
 -- 
 Jun Kuriyama <kuriyama@imgsrc.co.jp> // IMG SRC, Inc.
              <kuriyama@FreeBSD.org> // FreeBSD Project

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message