Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 10 Sep 2001 22:48:10 +0100
From:      Nik Clayton <nik@freebsd.org>
To:        Wolfram Schneider <wosch@freebsd.org>
Cc:        Nik Clayton <nik@freebsd.org>, Wolfram Schneider <wosch@cs.tu-berlin.de>, Dima Dorfman <dima@unixfreak.org>, bmah@freebsd.org, www@freebsd.org
Subject:   Re: RELNOTESng on Web site
Message-ID:  <20010910224810.F6391@clan.nothing-going-on.org>
In-Reply-To: <20010910211358.A21159@freno.cs.tu-berlin.de>; from wosch@freebsd.org on Mon, Sep 10, 2001 at 09:13:58PM %2B0200
References:  <20010821104242.B93901@clan.nothing-going-on.org> <20010831154356.9CFA23E35@bazooka.unixfreak.org> <20010831171735.M46201@clan.nothing-going-on.org> <20010902150220.B19172@freno.cs.tu-berlin.de> <20010903134831.Q46201@clan.nothing-going-on.org> <20010910211358.A21159@freno.cs.tu-berlin.de>

next in thread | previous in thread | raw e-mail | index | archive | help

--qxfKREH7IwbezJ+T
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Sep 10, 2001 at 09:13:58PM +0200, Wolfram Schneider wrote:
> On 2001-09-03 13:48:31 +0100, Nik Clayton wrote:
> > Wolfram,
> >=20
> > On Sun, Sep 02, 2001 at 03:02:21PM +0200, Wolfram Schneider wrote:
> > > > > >     /usr/local/www/bin/webupdate now checks out www/tools/webup=
date in
> > > > > >     to the same directory as "webupdate.run".
> > > > >=20
> > > > > This doesn't seem to be the case anymore.  It seems that
> > > > > /usr/local/www/bin/webupdate was replaced with whatever was there
> > > > > before you did anything:
> > > > >=20
> > > > > 	dd@freefall% cd /usr/local/www/bin
> > > > > 	dd@freefall% ls -l webupdate
> > > > > 	-rwxrwxr-x  1 wosch  www  781 Aug 28 10:30 webupdate
> > > > >                                      ^^^^^^^^^^^^^^
> > > > > Is there a reason why?  From the logs, it seems that webupdate was
> > > > > doing just fine with its work.
> > > >=20
> > > > Not a clue.
> > > >=20
> > > > Wolfram?  Any ideas?
> > >=20
> > > i removed your wrapper script because it was to buggy and
> > > insecure.
> >=20
> > Care to be more specific?
>=20
> here is your script:
> #!/bin/sh
> #
> # Update the FreeBSD WWW server from the CVS repository.
> #
> # This is small stub script.  The script that builds the web tree is also
> # stored in CVS.  So simply check out an up to date copy of that script, =
and
> # then call it.
> =20
> PATH=3D/bin:/usr/bin:/usr/local/bin; export PATH
> =20
> cvs -d /home/ncvs checkout -p www/tools/webupdate > webupdate.run
>=20
> 	1. this flooded my mailbox with useless rcs checkout=20
>            messages. One of the main goals of the webupdate script
>            is to avoid useless log messages

Redirect them, and/or point the www mail somewhere else.  I'm happy to
receive and monitor them.  One man's useless log message is another
man's reassurance that the process is running correctly.

> 	2. you created a shell script in my private home directory!
>            This is silly and insecure. I never give you the permission
>            to create or modify files in my home directory on freefall.

No.  I created the script in /usr/local/www/bin.  Actually, I copied the
pre-existing script to /usr/local/www/bin/webupdate.org (it's still
there) and modified /usr/local/www/bin/webupdate.

/usr/local/www !=3D /home/wosch.

> sh webupdate.run
> rm webupdate.run
>=20
> 	3. you are removing a file in my home directory. See 2)

See above, ditto.

N
--=20
FreeBSD: The Power to Serve             http://www.freebsd.org/
FreeBSD Documentation Project           http://www.freebsd.org/docproj/

          --- 15B8 3FFC DDB4 34B0 AA5F  94B7 93A8 0764 2C37 E375 ---

--qxfKREH7IwbezJ+T
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjudNRoACgkQk6gHZCw343UVxACeKf4G+ACcr5m61zbygCxlwfrG
GfkAn3bt6soTpiuAqbIxw51LBH32O+8k
=3YRz
-----END PGP SIGNATURE-----

--qxfKREH7IwbezJ+T--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-www" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010910224810.F6391>