272514 - make install does "chmod 755 data/", which breaks sendmail writing to that directory

Status: RESOLVED FIXED

(Webtools Graveyard :: Bonsai, defect)

Description

[Myk Melez [:myk] [@mykmelez]]

Bonsai's installer sets its data/ directory read-only for group and world users,
so sendmail can't write to it, breaking new checkin registration, which is done
by sendmail.  Or something like that, justdave knows more.  This breaks anew
every time we upgrade Bonsai.  We should have the makefile chmod 777 data/ as a
temporary fix.  We should have sendmail write new mail to a different directory
as a permanent fix.

Comment 1

[Dave Miller [:justdave]]

Yeah, what Myk said is pretty much what's happening.

Another long-term option is to create a "bonsai" user on the system, and make
all of the CGIs and the mail handling code be setuid bonsai.  This would be much
safer overall.  This is the approach that majordomo2 takes, and it works quite
well.  The actual .cgi files are moved to the same name with a dot in front, and
a compiled-C stub is put in the original location with the setuid bit set which
does nothing but execute the original cgi script.

Comment 2

[cls]

*** Bug 187222 has been marked as a duplicate of this bug. ***

Comment 3

[Reed Loden [:reed]]

Bonsai's Makefile.in is completely screwed. Patch coming up.

Comment 4

[Reed Loden [:reed]]

Attachment: patch - v1

So, it wasn't as screwed as I thought, but it still needed work. This should fix everything to use the proper permissions.

Comment 5

[timeless]

Comment on attachment 247382 [details] [diff] [review]
patch - v1

we should use more lists...

cp $(SRCLIST) $(PREFIX)/data; ...

Comment 6

[Reed Loden [:reed]]

Checking in Makefile.in;
/cvsroot/mozilla/webtools/bonsai/Makefile.in,v  <--  Makefile.in
new revision: 1.15; previous revision: 1.14
done

timeless: Can you file a bug on using more lists?