ports/mail/dspam/files/patch-src__Makefile.in
Jason Unovitch 2e4733463a mail/dspam: implement privilege separation (resolves bug running with suexec)
- Runs as dspam:dspam instead of root:mail. The dspam UID/GID were created
  in r168311 when the UIDs/GIDs files were added but the port had always
  used root:mail. This had prevented running the dspam webUI under Apache
  with suexec due to a minimal requirement of UID/GID of 100. The original
  unsecure behavior is available with the SETUID option.
- Default run directory is now /var/run/dspam. This follows the default
  upstream behavior and removes the patch to dspam.c as a result. Use
  RUN_DIR and correct the dspam.conf.sample file accordingly.
- Default daemon/client communication port is now 2424.
- Regen patches while here (portlint)

UPDATING: Document privilege separated dspam

PR:		115957
Reported by:	tedm@ipinc.net, support@ipinc.net
Submitted by:	Danny Warren <danny@dannywarren.com> (maintainer)
2016-05-01 01:13:06 +00:00

19 lines
944 B
Text

--- src/Makefile.in.orig 2012-04-23 17:53:45 UTC
+++ src/Makefile.in
@@ -1249,11 +1249,11 @@ install-exec-hook:
mkdir -p $(DESTDIR)$(sysconfdir); \
chmod 755 $(DESTDIR)$(sysconfdir); \
fi
- -if test ! -f $(DESTDIR)$(sysconfdir)/dspam.conf; then \
- cp dspam.conf $(DESTDIR)$(sysconfdir)/dspam.conf; \
- chmod 640 $(DESTDIR)$(sysconfdir)/dspam.conf; \
- chown "$(dspam_owner)" $(DESTDIR)$(sysconfdir)/dspam.conf; \
- chgrp "$(dspam_group)" $(DESTDIR)$(sysconfdir)/dspam.conf; \
+ -if test ! -f $(DESTDIR)$(sysconfdir)/dspam.conf.sample; then \
+ cp dspam.conf $(DESTDIR)$(sysconfdir)/dspam.conf.sample; \
+ chmod 640 $(DESTDIR)$(sysconfdir)/dspam.conf.sample; \
+ chown "$(dspam_owner)" $(DESTDIR)$(sysconfdir)/dspam.conf.sample; \
+ chgrp "$(dspam_group)" $(DESTDIR)$(sysconfdir)/dspam.conf.sample; \
fi
-if test x"$(dspam_owner)" != xnone; then \
chown "$(dspam_owner)" $(DESTDIR)$(bindir)/dspam; \