Date: Mon, 29 Jan 2018 01:40:26 +0700 From: Eugene Grosbein <eugen@grosbein.net> To: Yasuhiro KIMURA <yasu@utahime.org>, freebsd-ports@freebsd.org Subject: Re: daily security run output and joomla3 Message-ID: <5A6E191A.8090903@grosbein.net> In-Reply-To: <20180128180456.wle3ydeqhshspq6y@ler-imac.local> References: <BN6PR2001MB1730E3A2E333A619617FA8E880E60@BN6PR2001MB1730.namprd20.prod.outlook.com> <6eb84508-9379-7030-1989-b0c1796c9dd8@quip.cz> <BN6PR2001MB17305EA8F53CFD1FC963957580E60@BN6PR2001MB1730.namprd20.prod.outlook.com> <20180129.025651.1943739201262226813.yasu@utahime.org> <20180128180456.wle3ydeqhshspq6y@ler-imac.local>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --gOaGvRq3bFS4p1WFdnkrH2MAK1PueuagU Content-Type: multipart/mixed; boundary="kbe0STr48Mwsko0XJSxxGWFUXTUfBlsmc"; protected-headers="v1" From: Eugene Grosbein <eugen@grosbein.net> To: Yasuhiro KIMURA <yasu@utahime.org>, freebsd-ports@freebsd.org Message-ID: <5A6E191A.8090903@grosbein.net> Subject: Re: daily security run output and joomla3 References: <BN6PR2001MB1730E3A2E333A619617FA8E880E60@BN6PR2001MB1730.namprd20.prod.outlook.com> <6eb84508-9379-7030-1989-b0c1796c9dd8@quip.cz> <BN6PR2001MB17305EA8F53CFD1FC963957580E60@BN6PR2001MB1730.namprd20.prod.outlook.com> <20180129.025651.1943739201262226813.yasu@utahime.org> <20180128180456.wle3ydeqhshspq6y@ler-imac.local> In-Reply-To: <20180128180456.wle3ydeqhshspq6y@ler-imac.local> --kbe0STr48Mwsko0XJSxxGWFUXTUfBlsmc Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable 29.01.2018 1:04, Larry Rosenman wrote: >> Accoding to the messages of security periodic sript, the problrem is >> not checksum mismatch but lost of package files. And "pkg check -r" >> cannot recover it. So you should reinstall www/joomla3. >> > But as the OP notes, the joomla3 instructions *REQUIRE* > removal of the install directory for security reasons, so=20 > I understand where he is coming from.=20 >=20 > As the maintainer, I'm not sure how to fix it. It is obvious: "install directory" should be removed from plist, the port should supply convenient target to perform this removal and there should be pkg-deinstall procedure to remove that directory upon package deinstallation. --kbe0STr48Mwsko0XJSxxGWFUXTUfBlsmc-- --gOaGvRq3bFS4p1WFdnkrH2MAK1PueuagU Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJabhkgAAoJELDNGvImmIso4OMH/0kY+zNYOzBBBy8tsizHeFPC 7Y2fyeYwY25lR0t4QRXSjPCgSNhwRoY9lGqRdZn4HBCvf9PkdkX/LMWqWBoAuQiq S8GSYYxk0lnFrPCvZdxzfFKRt6QmEM3LScDT9DWvIFXbHhPjhmKoLiSiGGWOYMtC AJfBe0cXtc3z5fB7BalVqumjoRY1S0hJJy4S7kxMPuV4DoisCHFNJbbsEHILRuB8 rvGkmHAUFK1IvhhMs576I2+qB+ZGjnyQ0kyUJDp+4Gl4R0ypPD6wGHnES/gHGUvu j95DHWsuAx+Z3W+MkCyh/3JXOnlNw459wU2MiCkkXjvPFP4IdMwPlNqrG+/Pwoc= =8Buf -----END PGP SIGNATURE----- --gOaGvRq3bFS4p1WFdnkrH2MAK1PueuagU--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5A6E191A.8090903>