On Sun, Jan 28, 2018 at 07:31:00PM +0100, Baptiste Daroussin wrote:
> On Mon, Jan 29, 2018 at 03:27:22AM +0900, Yasuhiro KIMURA wrote:
> > From: Larry Rosenman <l...@lerctr.org>
> > Subject: Re: daily security run output and joomla3
> > Date: Sun, 28 Jan 2018 12:04:56 -0600
> > 
> > > But as the OP notes, the joomla3 instructions *REQUIRE*
> > > removal of the install directory for security reasons, so 
> > > I understand where he is coming from. 
> > 
> > Do you mean that all installed file must be removed? If so, what about
> > simply deinstalling joomla3 package after instructions are finished?
> > 
> 
> Does changing the owners of the directory to nobody helps? joomla (www users)
> might not be able to read it

Another way (still ugly) would be 2 packages: joomla and
joomla-installation-cruft and once setup is done the user should pkg delete
joomla-installation-cruft

Just thinking, can't find better ideas so far :)

Bapt

Attachment: signature.asc
Description: PGP signature

Reply via email to