Date: Sun, 28 Jan 2018 19:12:20 +0100 From: Baptiste Daroussin <bapt@FreeBSD.org> To: Yasuhiro KIMURA <yasu@utahime.org>, freebsd-ports@freebsd.org Subject: Re: daily security run output and joomla3 Message-ID: <20180128181220.dekawy5jp6k743jn@ivaldir.net> In-Reply-To: <20180128180456.wle3ydeqhshspq6y@ler-imac.local> References: <BN6PR2001MB1730E3A2E333A619617FA8E880E60@BN6PR2001MB1730.namprd20.prod.outlook.com> <6eb84508-9379-7030-1989-b0c1796c9dd8@quip.cz> <BN6PR2001MB17305EA8F53CFD1FC963957580E60@BN6PR2001MB1730.namprd20.prod.outlook.com> <20180129.025651.1943739201262226813.yasu@utahime.org> <20180128180456.wle3ydeqhshspq6y@ler-imac.local>
next in thread | previous in thread | raw e-mail | index | archive | help
--5guathsui6g7jcgn Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Jan 28, 2018 at 12:04:56PM -0600, Larry Rosenman wrote: > On Mon, Jan 29, 2018 at 02:56:51AM +0900, Yasuhiro KIMURA wrote: > > From: Carmel NY <carmel_ny@outlook.com> > > Subject: Re: daily security run output and joomla3 > > Date: Sun, 28 Jan 2018 17:38:10 +0000 > >=20 > > >>You can try "pkg check -r", see man pkg-check > > >=20 > > > Unfortunately, that has no affect. > >=20 > > Accoding to the messages of security periodic sript, the problrem is > > not checksum mismatch but lost of package files. And "pkg check -r" > > cannot recover it. So you should reinstall www/joomla3. > >=20 > But as the OP notes, the joomla3 instructions *REQUIRE* > removal of the install directory for security reasons, so=20 > I understand where he is coming from.=20 >=20 > As the maintainer, I'm not sure how to fix it. I'm sorry but I have not idea as well on how to fix. As a matter of fact, I do think web apps (most of them at least) have no re= asons to be packaged at all. That said, it does not solve the problem :) To be more constructive, that would require to track softly some files as belonging to the package, which I don't like much... have a directory which= act like @sample might be doable but still I do consider that as a hack. Any better idea welcomed Best regards, Bapt --5guathsui6g7jcgn Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEgOTj3suS2urGXVU3Y4mL3PG3PloFAlpuEoIACgkQY4mL3PG3 PlqCJg/+L6/zZ53NUSyAo8nB7O7uLWMteG5qKEfFY1oglhyEKe9TzzLHDr4PTRJ5 AfwcM+3qkiJNwhhLhq8ZKhksmMimPvrBHrpktZ9SWUV3Zv05HPtsCXL/9DfvhXVA byNHjp3p/Ph16h9+nixX5Ku4OeqjJDZeEroJazTxgQe9ZRBVs1xcqd9OP+ST7LC6 +5uGl3lI2+zGy5BIcEvURimFA2HaxiWlQpUQ46urIRQr29gMZkrsy4iv/kwswmos W8+3A+q1zE9PdQ7rwDUW9OwTIgp6vz0ty2KmZh6raaw3Xdbux7NaPJWiYBNJvU/K JbXyU/8eL/nqUz/dEwk0n1FwFn45Nbd9DUhXhom2IBYzVUhCMUfZ8CyZKeEC4Dgb puJyp0PmHzbKbko+3WGQNJN0Lg5OJAdntI2am62eOVjtg6/1KInXHBvU/dJ4NVNd 5abwPs9SXVIpu0/blDSySRzz9yiQaILyoYti+KQ6rMrS/IiDX1tLJRpj7a2ztDVR 5UXGwDxo8bvAH6P41qc9pkNpgwYCBv52iUjeII/9GPdczRnayoXStKNcN6Y99A6v OvIS+QHoXsP3RGeRiPgWmazPiHzSYcHhJE/wtcRXIqWDKuorXPOK5pB9iU+2nFZD SYwlkx9pfe21JAIH+vFF+5y+fFLe/1sVQVNohpTe+rNCPAIh4PY= =oglI -----END PGP SIGNATURE----- --5guathsui6g7jcgn--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20180128181220.dekawy5jp6k743jn>