*BSD News Article 92301


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!feed1.news.erols.com!howland.erols.net!newsxfer.itd.umich.edu!uunet!in1.uu.net!199.232.136.71!venus.os.com!news.os.com!craigs
From: craigs@os.com (Craig Shrimpton)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: MS Frontpage Ext. for FreeBSD?
Date: Sat, 29 Mar 1997 21:20:40 -0500
Organization: Orbit Systems
Lines: 37
Message-ID: <craigs-ya02408000R2903972120400001@news.os.com>
References: <333c6d86.7784747@snews2.zippo.com> <I2O$A0@NewsReader.Com>
NNTP-Posting-Host: titan.os.com
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Newsreader: Yet Another NewsWatcher 2.4.0
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:38020

In article <I2O$A0@NewsReader.Com>, curt@kcwc.com (Curt Welch) wrote:

> 
> The real fix is to get a normal Unix version of crypt and recompile
> something.  I never bothered to figure this out.  Was it the
> Apache server that needed to be recompiled?  Or was it
> the front page software that was dynamically linked with
> the freebsd libs?    I don't know.

Get the DES libs and recompile Apache with:

AUX_LIBS= -ldescrypt


Also, the extension installer sets several conf files world writable.  I
edited the fp_install script as follows:

diff fp_install fp_install~
585c585
< chmod( 0664,  "$documentroot/_vti_pvt/httpconf.lck",
---
> chmod( 0666,  "$documentroot/_vti_pvt/httpconf.lck",
594c594
< chmod( 0775,  "$HTTPDCONFDIR/fakeconf$vhsuffix" );
---
> chmod( 0777,  "$HTTPDCONFDIR/fakeconf$vhsuffix" );

This may or may not solve a potential security problem but so far I've had
no trouble.  Notice group is "rwx."  All my FP users are in their own
groups so don't set 077x if you have generic groups like "users."

-Craig

-- 
Orbit Data Systems, Inc.                         Craig Shrimpton
400 Grove Street                                 508-753-8776
Worcester, MA  01605                             http://www.os.com/