httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ralf S. Engelschall" <...@engelschall.com>
Subject Re: [PATCH] SECURITY: UID of htdocs & icons data
Date Thu, 10 Dec 1998 07:15:22 GMT

In article <4.1.19981209122315.00b806c0@hyperreal.org> you wrote:
> At 07:39 PM 12/9/98 +0100, Ralf S. Engelschall wrote:
>>
>>In article <4.1.19981209062808.00c21100@hyperreal.org> you wrote:
>>> At 10:49 AM 12/7/98 -0800, Wilfredo Sanchez wrote: 
>>>>
>>>> | Hey, Gregory had a good idea (in a private mail to me): We can use a 
>>>> | tool to fixup the UID/GID in the generated tarball. 
>>>>
>>>> FYI- GNU tar has options: 
>>>>
>>>>       --owner=NAME             force NAME as owner for added files 
>>>>       --group=NAME             force NAME as group for added files 
>>>>
>>>> but this applies to all files, and doesn't help if you want some files
> with 
>>>> uid X and others with uid Y. 
>>
>>> This seems like it'd be plenty sufficient for our purposes...  I'd much 
>>rather
>>> do this than force the package builder to chown a bunch of files to root  -
>>> ick.
>>
>>Sure, but is GNU tar installed on taz? taz is a FreeBSD box, but at least my
>>FreeBSD tar doesn't support the above options.  When this is also the case for
>>taz, please either install GNU tar or Tardy for us, Brian.

> [taz] 12:20pm ~ > gtar --version
> GNU tar version 1.12

> [taz] 12:21pm ~ > tar --help
> This is GNU tar, the tape archiving program.
> choose one of the following:
> ...
>       --owner=NAME             force NAME as owner for added files
>       --group=NAME             force NAME as group for added files
> ...

Ah, fine. Because for me it was:

:> tar --version
GNU tar version 1.11.3

Seems like I should upgrade my FreeBSD box or at least 
install the gtar port ;-)

Fine, then we can change the tarball rolling procedure to
include these two options.

                                       Ralf S. Engelschall
                                       rse@engelschall.com
                                       www.engelschall.com

Mime
View raw message