ports/85872: [PATCH] www/eaccelerator: security issue & provide more installation instructions

[chinsan]

>Number:         85872
>Category:       ports
>Synopsis:       [PATCH] www/eaccelerator: security issue & provide more installation instructions
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Thu Sep 08 15:30:09 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     chinsan
>Release:        FreeBSD 5.4-STABLE i386
>Organization:
FreeBSD Taiwan
>Environment:
System: FreeBSD chinsan.twbbs.org 5.4-STABLE FreeBSD 5.4-STABLE #0: Sun Aug 14 21:25:08 CST 2005 root at chinsan.twbbs.org:/usr/obj/usr/src/sys/TAKAKO i386
>Description:
	- Fix some security issue(s/0777/0755)
	- Provide more installation instructions
	- Port maintainer(ale at FreeBSD.org) is CC'd.

	Thanks. :)

>How-To-Repeat:
>Fix:

--- eaccelerator.diff begins here ---
diff -ruN eaccelerator.orig/Makefile eaccelerator/Makefile
--- eaccelerator.orig/Makefile	Thu Sep  8 23:04:44 2005
+++ eaccelerator/Makefile	Thu Sep  8 23:14:33 2005
@@ -43,7 +43,8 @@
 .endif
 
 post-build:
-	@${SED} "s|%%LOCALBASE%%|${LOCALBASE}|g" ${WRKSRC}/encoder.php > ${WRKSRC}/encoder
+	@${SED} "s|%%LOCALBASE%%|${LOCALBASE}|g; s|0777|0755|g" \
+		${WRKSRC}/encoder.php > ${WRKSRC}/encoder
 
 do-install:
 	@${MKDIR} ${PREFIX}/lib/php/${PHP_EXT_DIR}
diff -ruN eaccelerator.orig/files/pkg-message.in eaccelerator/files/pkg-message.in
--- eaccelerator.orig/files/pkg-message.in	Thu Sep  8 23:04:44 2005
+++ eaccelerator/files/pkg-message.in	Thu Sep  8 23:20:58 2005
@@ -1,18 +1,37 @@
 *****************************************************************************
 
-Edit %%LOCALBASE%%/etc/php/extensions.ini and add:
+1. Edit %%LOCALBASE%%/etc/php/extensions.ini and add:
 
-extension=eaccelerator.so
+	extension=eaccelerator.so
 
-****************************************************
-*** This extension must be loaded after          ***
-*** extension=session.so                         ***
-****************************************************
+   ****************************************************
+   *** This extension must be loaded after          ***
+   *** extension=session.so                         ***
+   ****************************************************
 
-Then create the cache directory:
+2. Then create the cache directory:
 
-mkdir /tmp/eaccelerator
-chown www /tmp/eaccelerator
-chmod 0700 /tmp/eaccelerator
+    # mkdir /tmp/eaccelerator
+    # chown www /tmp/eaccelerator
+    # chmod 0700 /tmp/eaccelerator
+
+3. Finally, edit %%LOCALBASE%%/etc/php.ini to fit your need:
+   ; For example
+	eaccelerator.shm_size="16"
+	eaccelerator.cache_dir="/tmp/eaccelerator"
+	eaccelerator.enable="1"
+	eaccelerator.optimizer="1"
+	eaccelerator.check_mtime="1"
+	eaccelerator.debug="0"
+	eaccelerator.filter=""
+	eaccelerator.shm_max="0"
+	eaccelerator.shm_ttl="0"
+	eaccelerator.shm_prune_period="0"
+	eaccelerator.shm_only="0"
+	eaccelerator.compress="1"
+	eaccelerator.compress_level="9" 
+
+  For more detailed information, please take a look at 
+    http://eaccelerator.net/IniSettingsUk
 
 *****************************************************************************
--- eaccelerator.diff ends here ---


>Release-Note:
>Audit-Trail:
>Unformatted: