From owner-freebsd-ports@freebsd.org Sun Jan 28 18:12:21 2018 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 64059ED66A9 for ; Sun, 28 Jan 2018 18:12:21 +0000 (UTC) (envelope-from bapt@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [96.47.72.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "freefall.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1930168484; Sun, 28 Jan 2018 18:12:21 +0000 (UTC) (envelope-from bapt@freebsd.org) Received: by freefall.freebsd.org (Postfix, from userid 1235) id 1222641B8; Sun, 28 Jan 2018 18:12:21 +0000 (UTC) Received: by ivaldir.etoilebsd.net (Postfix, from userid 1001) id 924DC6A041; Sun, 28 Jan 2018 19:12:20 +0100 (CET) Date: Sun, 28 Jan 2018 19:12:20 +0100 From: Baptiste Daroussin To: Yasuhiro KIMURA , freebsd-ports@freebsd.org Subject: Re: daily security run output and joomla3 Message-ID: <20180128181220.dekawy5jp6k743jn@ivaldir.net> References: <6eb84508-9379-7030-1989-b0c1796c9dd8@quip.cz> <20180129.025651.1943739201262226813.yasu@utahime.org> <20180128180456.wle3ydeqhshspq6y@ler-imac.local> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="5guathsui6g7jcgn" Content-Disposition: inline In-Reply-To: <20180128180456.wle3ydeqhshspq6y@ler-imac.local> User-Agent: NeoMutt/20171215 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Jan 2018 18:12:21 -0000 --5guathsui6g7jcgn Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Jan 28, 2018 at 12:04:56PM -0600, Larry Rosenman wrote: > On Mon, Jan 29, 2018 at 02:56:51AM +0900, Yasuhiro KIMURA wrote: > > From: Carmel NY > > Subject: Re: daily security run output and joomla3 > > Date: Sun, 28 Jan 2018 17:38:10 +0000 > >=20 > > >>You can try "pkg check -r", see man pkg-check > > >=20 > > > Unfortunately, that has no affect. > >=20 > > Accoding to the messages of security periodic sript, the problrem is > > not checksum mismatch but lost of package files. And "pkg check -r" > > cannot recover it. So you should reinstall www/joomla3. > >=20 > But as the OP notes, the joomla3 instructions *REQUIRE* > removal of the install directory for security reasons, so=20 > I understand where he is coming from.=20 >=20 > As the maintainer, I'm not sure how to fix it. I'm sorry but I have not idea as well on how to fix. As a matter of fact, I do think web apps (most of them at least) have no re= asons to be packaged at all. That said, it does not solve the problem :) To be more constructive, that would require to track softly some files as belonging to the package, which I don't like much... have a directory which= act like @sample might be doable but still I do consider that as a hack. Any better idea welcomed Best regards, Bapt --5guathsui6g7jcgn Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEgOTj3suS2urGXVU3Y4mL3PG3PloFAlpuEoIACgkQY4mL3PG3 PlqCJg/+L6/zZ53NUSyAo8nB7O7uLWMteG5qKEfFY1oglhyEKe9TzzLHDr4PTRJ5 AfwcM+3qkiJNwhhLhq8ZKhksmMimPvrBHrpktZ9SWUV3Zv05HPtsCXL/9DfvhXVA byNHjp3p/Ph16h9+nixX5Ku4OeqjJDZeEroJazTxgQe9ZRBVs1xcqd9OP+ST7LC6 +5uGl3lI2+zGy5BIcEvURimFA2HaxiWlQpUQ46urIRQr29gMZkrsy4iv/kwswmos W8+3A+q1zE9PdQ7rwDUW9OwTIgp6vz0ty2KmZh6raaw3Xdbux7NaPJWiYBNJvU/K JbXyU/8eL/nqUz/dEwk0n1FwFn45Nbd9DUhXhom2IBYzVUhCMUfZ8CyZKeEC4Dgb puJyp0PmHzbKbko+3WGQNJN0Lg5OJAdntI2am62eOVjtg6/1KInXHBvU/dJ4NVNd 5abwPs9SXVIpu0/blDSySRzz9yiQaILyoYti+KQ6rMrS/IiDX1tLJRpj7a2ztDVR 5UXGwDxo8bvAH6P41qc9pkNpgwYCBv52iUjeII/9GPdczRnayoXStKNcN6Y99A6v OvIS+QHoXsP3RGeRiPgWmazPiHzSYcHhJE/wtcRXIqWDKuorXPOK5pB9iU+2nFZD SYwlkx9pfe21JAIH+vFF+5y+fFLe/1sVQVNohpTe+rNCPAIh4PY= =oglI -----END PGP SIGNATURE----- --5guathsui6g7jcgn--