[arch-commits] Commit in nginx/trunk (PKGBUILD logrotate)

[Levente Polyak]

    Date: Wednesday, January 18, 2017 @ 12:12:44
  Author: anthraxx
Revision: 286910

upgpkg: nginx 1.10.2-4 (fix logrotate regression)

Logrotate currently fails and exits unclean as the http user
lost access to the log directory to fix CVE-2016-1247.
We remove the 'su' specification for logrotate and let the root
user do the job, the 'create' option is responsible for the uid/gid
of the new files after rotation. As rotate preserves the uid/gid
this just works without behaviour change without being http.

Modified:
  nginx/trunk/PKGBUILD
  nginx/trunk/logrotate

-----------+
 PKGBUILD  |    4 ++--
 logrotate |    1 -
 2 files changed, 2 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2017-01-18 08:05:14 UTC (rev 286909)
+++ PKGBUILD	2017-01-18 12:12:44 UTC (rev 286910)
@@ -7,7 +7,7 @@
 
 pkgname=nginx
 pkgver=1.10.2
-pkgrel=3
+pkgrel=4
 pkgdesc='Lightweight HTTP server and IMAP/POP3 proxy server'
 arch=('i686' 'x86_64')
 url='https://nginx.org'
@@ -32,7 +32,7 @@
 md5sums=('e8f5f4beed041e63eb97f9f4f55f3085'
          'SKIP'
          '5dd4d09914a4403b9df778ec1d66167c'
-         '83ffd315fed235b8fff40a7cfa23a16d')
+         '6a01fb17af86f03707c8ae60f98a2dc2')
 
 _common_flags=(
   --with-pcre-jit

Modified: logrotate
===================================================================
--- logrotate	2017-01-18 08:05:14 UTC (rev 286909)
+++ logrotate	2017-01-18 12:12:44 UTC (rev 286910)
@@ -2,7 +2,6 @@
 	missingok
 	notifempty
 	create 640 http log
-	su http log
 	sharedscripts
 	compress
 	postrotate