Search Criteria
Package Details: mantisbt 2.27.1-1
Package Actions
| Git Clone URL: | https://aur.archlinux.org/mantisbt.git (read-only, click to copy) | 
|---|---|
| Package Base: | mantisbt | 
| Description: | Web-based issue tracking system | 
| Upstream URL: | https://www.mantisbt.org/ | 
| Keywords: | bugs php tracker | 
| Licenses: | GPL2 | 
| Submitter: | alucryd | 
| Maintainer: | speed488 | 
| Last Packager: | speed488 | 
| Votes: | 3 | 
| Popularity: | 0.000000 | 
| First Submitted: | 2016-08-20 20:18 (UTC) | 
| Last Updated: | 2025-08-25 19:59 (UTC) | 
Dependencies (8)
- php
 - curl (curl-gitAUR, curl-c-aresAUR) (optional) – interface Twitter
 - mariadb (mysql55AUR, mysql56AUR, mysql57AUR, mysql80AUR, mysql81AUR, mysql84AUR, mysqlAUR, mariadb-lts, percona-server) (optional) – use local MySQL server
 - php-legacy-fpm (optional) – run in fastCGI process manager
 - php-legacy-gd (optional) – generate captcha
 - php-legacy-pgsql (optional) – use PostgreSQL database backend
 - postgresql (postgresql-12AUR, postgresql-gitAUR, postgresql16-docsAUR, postgresql16AUR, postgresql13AUR, postgresql15-docsAUR, postgresql15AUR, postgresql18-docsAUR, postgresql18AUR) (optional) – use local PostgreSQL database
 - uwsgi-plugin-php (optional) – run as application container
 
Latest Comments
Serus commented on 2025-07-08 03:26 (UTC)
Mantis does not work with the php package anymore, please change the dependency to php-legacy.
dvzrv commented on 2019-06-14 22:26 (UTC)
The upgrade to 2.21.1 requires mantisbt to be run as its own user/group: mantisbt.
I haven't gotten around updating the wiki page (in a long time), but will do that soonish and most likely also move mantisbt back to [community] after that.
If you need configuration inspiration, you can have a look at the wiki pages for cacti and postfixadmin, where I added a lot of info on how running php webapps as a separate user can/should be achieved.
Kunda commented on 2019-04-29 12:21 (UTC)
https://mantisbt.org/blog/archives/mantisbt/627
Please update to 2.21
dvzrv commented on 2019-01-24 18:32 (UTC)
@jamespharvey20: you're absolutely right. will change that asap. haven't been paying too much attention to this PKGBUILD (got busy with [community]).
jamespharvey20 commented on 2019-01-24 02:01 (UTC) (edited on 2019-01-24 02:09 (UTC) by jamespharvey20)
The configuration files are world readable, which is a security issue since they contain passwords for the database, potentially smtp, and the salt.
I think it would be a good idea if the PKGBUILD set ownership to all /etc/webapps/mantisbt/ files to http:http, permissions 600.
EDIT: I think this will also have the side effect of the initial installation being able to write config_inc.php rather than having it give a write error, which although easier, is a double edged sword because it would probably make a much shortened version potentially leaving out some of the helpful options and comments that are in upstream's config.inc.php.sample which is copied to config_inc.php by the PKGBUILD.
dvzrv commented on 2017-01-26 10:18 (UTC)
dvzrv commented on 2016-09-22 17:58 (UTC)