Author: twittner Date: Fri Jan 19 19:19:38 2007 GMT Module: SPECS Tag: HEAD ---- Log message: - mark /etc/crond./awstats as config - make /etc/webapps/awstats/awstast*.conf worldreadable
---- Files affected: SPECS: awstats.spec (1.52 -> 1.53) ---- Diffs: ================================================================ Index: SPECS/awstats.spec diff -u SPECS/awstats.spec:1.52 SPECS/awstats.spec:1.53 --- SPECS/awstats.spec:1.52 Tue Jan 16 14:14:06 2007 +++ SPECS/awstats.spec Fri Jan 19 20:19:33 2007 @@ -5,22 +5,13 @@ # unfortunately they have already landed in Ac) # - apache1 config # - security CVE-2006-1945, CVE-2006-2237: http://security.gentoo.org/glsa/glsa-200606-06.xml -# -# NOTES: -# - /etc/cron.d/awstats contents is overwritten during upgrade - maybe this -# should be market as %config(noreplace) -# - Cron <[EMAIL PROTECTED]> umask 002; /usr/bin/awstats_updateall.pl now -configdir=/etc/webapps/awstats -awstatsprog=/usr/bin/awstats.pl -# Error: Can't scan directory /etc/webapps/awstats. -# called from /etc/cron.d/awstats uses `stats' user which has no rights for -# reading awstats configuration from /etc/webapps/awstats directory - what -# does prevent from making this directory and config files worldreadable? -# + %include /usr/lib/rpm/macros.perl Summary: Advanced Web Statistics is a free powerful server log file analyzer Summary(pl): Zaawansowany program do analizowania logów serwera Name: awstats Version: 6.6 -Release: 0.3 +Release: 0.4 License: GPL v2 Group: Applications/Networking Source0: http://awstats.sourceforge.net/files/%{name}-%{version}.tar.gz @@ -155,9 +146,9 @@ %dir %attr(750,root,http) %{_sysconfdir} %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/httpd.conf %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/lighttpd.conf -%attr(640,root,http) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/awstats*.conf +%attr(644,root,http) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/awstats*.conf +%attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/cron.d/awstats -%attr(640,root,root) /etc/cron.d/awstats %attr(755,root,root) %{_bindir}/*.pl %dir %{_datadir}/%{name} %{_datadir}/%{name}/lang @@ -179,6 +170,10 @@ All persons listed below can be reached at <cvs_login>@pld-linux.org $Log$ +Revision 1.53 2007/01/19 19:19:33 twittner +- mark /etc/crond./awstats as config +- make /etc/webapps/awstats/awstast*.conf worldreadable + Revision 1.52 2007/01/16 13:14:06 twittner - up to 6.6 (vendor claims that sec. hole described in CVE-2006-3681 has been already fixed) ================================================================ ---- CVS-web: http://cvs.pld-linux.org/SPECS/awstats.spec?r1=1.52&r2=1.53&f=u _______________________________________________ pld-cvs-commit mailing list [email protected] http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit
