[pkg-horde] Bug#514528: Kronolith reminders cronjob should run as www-data user

Mathieu Parent math.parent at gmail.com
Sun Feb 8 13:06:14 UTC 2009


Package: kronolith2
Version: 2.2-1
Severity: normal
Tags: patch

The cronjob currently run as root. Appart from security considerations,
temp files created while executing the sript are only readable/writable
by root.

This breaks Kolab cache handling.

Patch:
--- /etc/cron.d/kronolith2.old	2009-02-08 12:36:21.000000000 +0000
+++ /etc/cron.d/kronolith2	2009-02-08 12:36:44.000000000 +0000
@@ -1,4 +1,4 @@
 #
 # Regular cron jobs for the kronolith2 package
 #
-* * * * * root test -x /usr/bin/php && /usr/bin/php -q
/usr/share/horde3/kronolith/scripts/reminders.php > /dev/null 2>&1
+* * * * * www-data test -x /usr/bin/php && /usr/bin/php -q
/usr/share/horde3/kronolith/scripts/reminders.php > /dev/null 2>&1


Upstream doc: http://wiki.horde.org/KronolithReminders

-- System Information:
Debian Release: 5.0
  APT prefers testing
  APT policy: (900, 'testing'), (300, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-xen-686 (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash





More information about the pkg-horde-hackers mailing list