From nobody Sat May 6 20:33:30 2023 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QDK5R4KFWz496D7 for ; Sat, 6 May 2023 20:33:47 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic313-20.consmr.mail.gq1.yahoo.com (sonic313-20.consmr.mail.gq1.yahoo.com [98.137.65.83]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4QDK5Q47tWz3xFf for ; Sat, 6 May 2023 20:33:46 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=yahoo.com header.s=s2048 header.b=uFj9Fps2; spf=pass (mx1.freebsd.org: domain of marklmi@yahoo.com designates 98.137.65.83 as permitted sender) smtp.mailfrom=marklmi@yahoo.com; dmarc=pass (policy=reject) header.from=yahoo.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1683405225; bh=1VYos2ZzzAfDhwvxtxro0lydV+BY5kx/yClEB06WgRI=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From:Subject:Reply-To; b=uFj9Fps2kTbNH5cSmoHz74hIoPTZSEhlrtp48HT061xzq0WQmX4QG9fRK6HTTYaI9kUBueQVYv8ofZAX2FfDHAEf3fYgjqugIK0oHs7OoJRGhJuhkBFEs7Z3K6P31rtQVSzHambXTY6XMEgRmbCXTzR+ha7NnB2MIFAT46saPiwaH99peTbffDEIWDmBmLzzprAoJEzke3psnXJ5tcD0d6UBVpda3hgssHhyoQT/7r4XlZ/TackwQLmQ6TxqJKI23ZHUpMzZigCr7REfWF4D5Vr54wdxjgGlimTMscYVkpMLTFW7lVW7mE85uPY1xsHjLKfIOQPUjqVLKS89qqB2bA== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1683405225; bh=9h0hONdw/wBPRKUwmMVNx/UdaWvnRIR1qB8gnUQGTxM=; h=X-Sonic-MF:Subject:From:Date:To:From:Subject; b=Rrt7KH3r0wX2hshra9n+ynkIIOUfUYnQg4VAORdF+TEfvOWzwED8EgZfv5XcEE5J9szgMI166VItiaWgWnSSQwdnkLnNtN2CIkPDGEyr8hjJUKx7yFdX9xnljnkc5tNf+OlOMV6BIG6F06R3uHCsZxuK/B4SosRcmXmTh/VyZMYtPko8UtPraw2X2Wf5aF/a9UKumQFyeMXkmX65AjUSQwFj5Ryvo7qNVYJHzPVrVBWSz0jzSbYioL9h62krk5axfheaewQRyduDmuwBJsVKAraF4F9BYSFkKEhQDilin6BLpLR8axylzx9tnbwE+gp8j1kS83aF63bVachcdft8fA== X-YMail-OSG: NK3.yWEVM1kMpfkDBVLe_vXbHJvKkupKafc9mhwdYH2QznWwDlH_1paekSAD.HB wKImuuGERVkNH39yxgdnGiQcMUoskjuvVXSuA8iFfHYwXWSKJPSuq4EYSjEPeUSHTpe4mz9l5xHx kfvsMBmq6yE5oXCGJbL3m4IdOJmhHG1qevL1faqtuNFeGISkg587CFUg4PAM5ctfAK2WG30xUKGV MZQlEAeHcX5PT_Fp4bzDDzx3lre4M8RFw3yQzZmQ2gqzf5wQd3h9wPccqqnpAwTLWO5gLLrFVlxW iv_sMCbb18JB04IuLwmbLKqEXWkpSMK2.FbW07ACApcwnwIowFT_BxbaeVfnbuOUSWD4.SN7Z.ls JugojZkuBcqmk9rh5xRPuoa3uQNzbcFiJ6rkegf6KGIGL9PpbciFNcvwDn.9_32vg2Mz0vR6hP.D VDHDBOSZ.skgYhH1VDMzg_utzsZTP9MF4Nd4A16_sk8uTeLQLyVi.uZA7PTcuP30WMb__T9wTpdN rsMx6u0ziWR7J2B4Xh44ihIvIBJaUPgYyrGP4EOJ1P_LHu9WlCADYJ5HnoLXTEsneomTpP4uAR32 3tbXMp5cxbfdWPnnV8lsNbxrXsHRC.3wMB2BsKU4M6wp83yIo8ZhE.NFN.ezReBtDl3Wf2qIZ9ez BAZAxoETFXWDvTmCQCrzLh4wV4c1.eAEnf.Jms9PrtqKHyZ109xizmVkmln6ESe.7JZqsboRJSbv N.ZUb_h2u0TFBvRCnSJLOktpS101UBJFfgtHl5TE_hOI7ib9NuD39fKEdA3.FEOGTPAI_kaJ0bbZ 6QfHHrjpoXhzN644pJrbAZQeoeRu9mLtRVF6_BUHcf.LtQjM4.Lhk1KHtZ93RzTLFNxcyU1fR9MM w1ht0YnR5mGphWzlmhShZ4wU.zHxtjmGEiBmeiST0i7QO_z1SXdUEVxpBdzAY.ohCcccqjW5Mjfx .L6bsxv3cRZplSTY.eHZev_6koB91..BG7VhstqxF7rnVOpDYfn487FTtT1s5Gegq4KcpSqJJ1yA d3nz2JRfjdFN8i4MFxvrAlweiSRnwB0LtOc..9y4AHJEg.ZUuQc0pGUgw5muIoU3yVVgtsVITsvl 7j.0nhIWGxKYaTHZ5QxxvQAd_mq9YKq_EYBNrnX321WRd2x1O72G1fLtFE8ORcY_oOlQTGXivbkv xIpueXaNrCN5jo2e8_nBFI8s28ibk_QZduMWxFCj7lkB.didmgPGfkL8VtKyqd7OHAP81Q6BXfx_ HU.H526G3rr3gmn5NJT3D_IX.tpUiDb.uniO8mEY9ySEsDhspUAD4s66Qo2ZC2WzQAtL2mF2jtSb 6njYEbVTxL71IOjg8Ug_C.k356Pxhra_OpNBWptykwhTSb4WOLyfabE5K94anMFKuc5gLyAzsNdx dyCPzNmCAVY6GptrhZE6595sERomONBUkeW71BFrGt_vCl4r.bh8juHYzsxhuowpVt.Z6WxCKbve jwUyHRk6Qm1AyUwrEXsQ4Gb8nrag85sUWOj3Dc.f_mtIH6CZQpmGQVshQT_PqJO21B7osuzc_hFu 0l8aX7cCOSmq6kkmlAIUgEGN6VG9uPTCZXTRCqpcyK4qDlIlOdY.lXRnuL4sRzBLYUynAxn.FQq9 UJM3SZ2D2dHtyYUkUjLJjPqWts63QN0vXyU5xawgA58hD5sD9CZhH.Ff_6tdH6Ad.DMN1GlMd9ay Yfin_JNzzW4ufC3T3Dsmngd.sQFA57WlHXgQin6TfI2rA_ci6Zi5SFHBdQ6r.DBPNUO5_5wyHDK5 WtjtzZHXZk86yT03YHxcPiF.KlKGzEs6R8OSbVp0cmhowoPIvBIiBAI1bhwiJ80HgtzMFDdxsr40 PdWIZaLWpTZ0mdOOTfWrqFwxNCiuh_CpXpPZD0i7hGrp.N02WHWm6e63fIhHmr8CMcXY2FAhmwbX tprHcvGm4.iN2Y48xI8rQ0rcwMC1yCpBL9tpItl74yii.mLje.IRgUE.pLWRxPKUrgVUtwCFJFA5 PN6MUzKG7JGdQonT71AeUxWD6YLfl7OfLgJr7Q4SKX0ahWYB90my0kKtknhAD4JOmK4CPegKKYEr lKbUB9QtJqWFG5kT.6YdtVRhHAWKpqXa2dLXusGIcepGxJR7uPW0GlXjQhqVMKCM_FWlOahIusX0 DEsOZpkcKO6BgYBZPP6JuG2vUfB9uJ33oaNDc_.krpaBK5OPGEi1lRP1MFOC5ZOoI3leF6rj5T62 p8RuviJ0_gktT6Poj4BD8AtrsmHDHTaR5SVMrK4GNAzvNyfdJfFWL8nWK_ZowDoNX.82Lbv_W30W uVi8- X-Sonic-MF: X-Sonic-ID: 769514a7-6436-49f6-bee9-f400fe4c31e8 Received: from sonic.gate.mail.ne1.yahoo.com by sonic313.consmr.mail.gq1.yahoo.com with HTTP; Sat, 6 May 2023 20:33:45 +0000 Received: by hermes--production-bf1-5f9df5c5c4-84ds6 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID fb4b3d6102a3e6248bd13ef09f6d59da; Sat, 06 May 2023 20:33:42 +0000 (UTC) Content-Type: text/plain; charset=us-ascii List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\)) Subject: Re: git for armv7 From: Mark Millard In-Reply-To: <04F003D9-1391-4575-93A2-8528853DF1EE@yahoo.com> Date: Sat, 6 May 2023 13:33:30 -0700 Cc: Miroslav Lachman <000.fbsd@quip.cz>, FreeBSD Mailing List Content-Transfer-Encoding: quoted-printable Message-Id: <810B50C0-46C5-44DF-A73C-2CEC2D9B7A9B@yahoo.com> References: <7D7D80E2-D2C7-43F3-962C-EE5535409F38.ref@yahoo.com> <7D7D80E2-D2C7-43F3-962C-EE5535409F38@yahoo.com> <1fa6b95e-418c-7f34-25f0-c43b0b8cf871@quip.cz> <04F003D9-1391-4575-93A2-8528853DF1EE@yahoo.com> To: bob prohaska X-Mailer: Apple Mail (2.3731.400.51.1.1) X-Spamd-Result: default: False [-3.38 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.88)[-0.884]; MV_CASE(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[yahoo.com,reject]; R_DKIM_ALLOW(-0.20)[yahoo.com:s=s2048]; R_SPF_ALLOW(-0.20)[+ptr:yahoo.com]; MIME_GOOD(-0.10)[text/plain]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; ARC_NA(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[98.137.65.83:from]; DWL_DNSWL_NONE(0.00)[yahoo.com:dkim]; RCVD_TLS_LAST(0.00)[]; MLMMJ_DEST(0.00)[freebsd-ports@freebsd.org]; TO_DN_ALL(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; FREEMAIL_FROM(0.00)[yahoo.com]; MID_RHS_MATCH_FROM(0.00)[]; DKIM_TRACE(0.00)[yahoo.com:+]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US]; FREEMAIL_ENVFROM(0.00)[yahoo.com]; RWL_MAILSPIKE_POSSIBLE(0.00)[98.137.65.83:from] X-Rspamd-Queue-Id: 4QDK5Q47tWz3xFf X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N On May 6, 2023, at 13:11, Mark Millard wrote: > On May 6, 2023, at 12:40, Miroslav Lachman <000.fbsd@quip.cz> wrote: >=20 >> On 04/05/2023 04:32, bob prohaska wrote: >>> On Wed, May 03, 2023 at 12:38:58PM -0700, Mark Millard wrote: >>>> bob prohaska wrote on >>>> Date: Wed, 03 May 2023 18:43:09 UTC : >>=20 >> [..] >>=20 >>>> The old git package stuck around until the >>>> distribution of the packages from the first >>>> failure to build libunwind made it to the >>>> download servers. >>> Ahh, that makes sense. Old packages have too >>> much baggage 8-) for the public servers. >>> What happens in the case of a local poudriere >>> repository? If it once builds a package, which >>> subseqently fails, is the successful build >>> deleted? >>=20 >> I would like to recommend some settings for local builds in = poudriere.conf >> ATOMIC_PACKAGE_REPOSITORY=3Dyes >=20 > For reference, the commented descriptions from poudriere.conf.sample : >=20 > # The repository is updated atomically if set yes. This leaves the > # repository untouched until the build completes. This involves using > # hardlinks and symlinks. The operations are fast, but can be = intrusive > # for remote syncing or backups. > # Recommended to always keep on. > # Default: yes > #ATOMIC_PACKAGE_REPOSITORY=3Dyes >=20 >> COMMIT_PACKAGES_ON_FAILURE=3Dno >=20 > # When using ATOMIC_PACKAGE_REPOSITORY, commit the packages if some > # packages fail to build. Ignored ports are considered successful. > # This can be set to 'no' to only commit the packages once no failures > # are encountered. > # Default: yes > #COMMIT_PACKAGES_ON_FAILURE=3Dyes >=20 > So this is where the difference vs defaults is. > (But the two do operate as a pair for the result > being referenced.) >=20 >> These are very useful if you want a working repository for your = machines every time you run "pkg install" or "pkg upgrade". Nothing is = more frustrating than trying to build an update in Poudriere and it = fails, leaving you with a broken repository. That's why we use atomic = yes and don't commit on failure. >=20 > Agreed: Anyone biased toward an all-vs-no-update > status being a good thing should likely set this. Lets see if I can actually express a complete thought: Anyone biased toward an all-vs-no-update status being a good thing should likely set COMMIT_PACKAGES_ON_FAILURE to "no". > (It just happens to not be what I normally want. > But my context is odd.) >=20 >> It changes slightly what Mark Millard described - Poudriere does not = remove packages from your repository before building. It does it on a = separate copy of the repository that is only used for the bulk build, = and if it fails, your real repository remains untouched. >=20 > Technically, ATOMIC_PACKAGE_REPOSITORY always uses a separate > .build tree (name from memory), no matter the > COMMIT_PACKAGES_ON_FAILURE setting in use. This allows not > messing up the active repository for power outages and the > like. COMMIT_PACKAGES_ON_FAILURE is about what to do once the > bulk builder's have no more to do (just when it gets that far). >=20 > If a .build is not committed to active, the next bulk build > will use the .build's partial build as a starting point instead > of starting from scratch. poudriere produces a message about > that when it happens as I remember. >=20 > This reuse can help avoid unnecessary rebuild time until there > is no failure and a commit happens. >=20 >> If you want to keep older repositories, you can set the following = variables (we keep 3) >>=20 >> KEEP_OLD_PACKAGES=3Dyes >> KEEP_OLD_PACKAGES_COUNT=3D3 >>=20 =3D=3D=3D Mark Millard marklmi at yahoo.com From nobody Sun May 7 00:55:26 2023 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QDQvB0nL9z49Pg3 for ; Sun, 7 May 2023 00:55:18 +0000 (UTC) (envelope-from fbsd@www.zefox.net) Received: from www.zefox.net (www.zefox.net [50.1.20.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "www.zefox.com", Issuer "www.zefox.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QDQv93ms9z3H25 for ; Sun, 7 May 2023 00:55:17 +0000 (UTC) (envelope-from fbsd@www.zefox.net) Authentication-Results: mx1.freebsd.org; none Received: from www.zefox.net (localhost [127.0.0.1]) by www.zefox.net (8.17.1/8.15.2) with ESMTPS id 3470tQfm029488 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO); Sat, 6 May 2023 17:55:27 -0700 (PDT) (envelope-from fbsd@www.zefox.net) Received: (from fbsd@localhost) by www.zefox.net (8.17.1/8.15.2/Submit) id 3470tQsG029487; Sat, 6 May 2023 17:55:26 -0700 (PDT) (envelope-from fbsd) Date: Sat, 6 May 2023 17:55:26 -0700 From: bob prohaska To: Mark Millard Cc: FreeBSD Mailing List Subject: Re: git for armv7 Message-ID: References: List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4QDQv93ms9z3H25 X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:7065, ipnet:50.1.16.0/20, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N On Sat, May 06, 2023 at 12:45:55PM -0700, Mark Millard wrote: > bob prohaska wrote on > Date: Sat, 06 May 2023 18:43:52 UTC : > > > Pkg search git now reports > > pkg: repository FreeBSD contains packages for wrong OS version: FreeBSD:14:armv7 > > when run from a -current host which identifies itself as: > > FreeBSD www.zefox.com 14.0-CURRENT FreeBSD 14.0-CURRENT #22 main-1d35493e46: Tue Apr 18 06:23:00 PDT 2023 bob@www.zefox.com:/usr/obj/usr/src/arm.armv7/sys/GENERIC arm It looks as if I did catch the server at a bad time. A re-run of pkg search now produces different results. Long list, but no git (without hyphenated qualifiers). > > What does: > > # pkg info pkg > > report? bob@www:~ % pkg info pkg pkg-1.19.1_1 Name : pkg Version : 1.19.1_1 Installed on : Mon Mar 13 11:14:54 2023 PDT Origin : ports-mgmt/pkg Architecture : FreeBSD:14:armv7 Prefix : /usr/local Categories : ports-mgmt Licenses : BSD2CLAUSE Maintainer : pkg@FreeBSD.org WWW : https://github.com/freebsd/pkg Comment : Package manager Options : DOCS : on Shared Libs provided: libpkg.so.4 Annotations : FreeBSD_version: 1400081 repo_type : binary repository : FreeBSD Flat size : 30.1MiB Description : Package management tool WWW: https://github.com/freebsd/pkg > What does: > > # more /usr/local/etc/pkg/repos/FreeBSD.conf > > report? b@www:~ % more /usr/local/etc/pkg/repos/FreeBSD.conf FreeBSD: { enabled: yes } > What does: > > # more /usr/local/etc/pkg/repos/custom.conf > > report? bob@www:~ % more /usr/local/etc/pkg/repos/custom.conf custom: { url: "file:///usr/local/poudriere/data/packages/main-default/", enabled: no } > What does: > > # more /etc/pkg/FreeBSD.conf > > report? > bob@www:~ % more /etc/pkg/FreeBSD.conf # $FreeBSD$ # # To disable this repository, instead of modifying or removing this file, # create a /usr/local/etc/pkg/repos/FreeBSD.conf file: # # mkdir -p /usr/local/etc/pkg/repos # echo "FreeBSD: { enabled: no }" > /usr/local/etc/pkg/repos/FreeBSD.conf # FreeBSD: { url: "pkg+http://pkg.FreeBSD.org/${ABI}/latest", mirror_type: "srv", signature_type: "fingerprints", fingerprints: "/usr/share/keys/pkg", enabled: yes } > > At this point -current and 14 seem likely to be quite close. > > 14 has not branched yet: 14.0-CURRENT is all there is for 14. > There is no other CURRENT (main). > > The issue goes in some other direction. > > > Can pkg be persuaded to install the available version as an > > experiment? > > Figuring that out may require figuring out why the > "wrong OS version: FreeBSD:14:armv7" was generated. Given the non-repeat of the message which motivated my question it seems best to simply wait. Hopefully some sort of "git-lite" will become part of base, as with svn. Thanks for replying, apologies for the noise! bob prohaska From nobody Sun May 7 15:55:40 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QDpt52S3Pz497dN for ; Sun, 7 May 2023 15:55:41 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QDpt465Jkz3jrS for ; Sun, 7 May 2023 15:55:40 +0000 (UTC) (envelope-from portscout@FreeBSD.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683474940; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Dt17SjXPkbybyCSqhyKHiFr179Bm/E+arXMwVX4g2bs=; b=FKtY5KmLG3L38DjcJp/I3LfIVQgGQt0uWh3zka0xmHQfbjQL9P3pQ8Hb0PvPrKOGa7oH4q wpZkydVaVPkcpd7LMZplgIBZfBbXFQENLueFmsK0OY5N/rAIOBoJen5Q051fTuVK3lrr7t nt8PCge5XX0F64diyJQrTyQRbW2UYim0Z5gZsJh9YXvAAaIjVByB/Y4frnK1O6DrICn7ed 6npEDWSVjIrIeuKku9YFMlDEXYbiVl53PPrFmAFdPuRFr9rZtjRi64At0eKHIMRfy76IIc AH+7sxCew4dQqgL74eook1Yu3JJc6AA0RmXh5S7PODFgwtNwrVvyAUoVssJblQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683474940; a=rsa-sha256; cv=none; b=He6a1UKZcb4twa4aR6JymCXtx4cAE7dFfE1tMaoeUHRKGqdAtHpULtbHFaE29iIrzRYnbQ HVSyvzpiWAOuD1gzp54tyMK5FcYlUvb/GMrKBB6iDJfZ1pVLn9hAhzN5DnmtZh5jjuLmPw TlahrXl3/iCdzSd+3UWa+6ES4L1t95T0uT6t8OGECIh97R+gD+NizYv47YDPbDHaxR40Ea Km5ExKP4XSMYM6TMPSMhdME0f3usZpSL+Ud3bCS1ZzCfdsBATIA8IxfHga28n+Dgr8EXm9 UA9Ol0seZPAjBg6v90C7rJBzJECsMNe6aakCB4uQ3yIEROKexCbuYeFWYhQsbQ== Received: from portscout.nyi.freebsd.org (portscout.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QDpt453KJzPb6 for ; Sun, 7 May 2023 15:55:40 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from portscout.nyi.freebsd.org ([127.0.1.10]) by portscout.nyi.freebsd.org (8.15.2/8.15.2) with ESMTP id 347Fte78087215 for ; Sun, 7 May 2023 15:55:40 GMT (envelope-from portscout@FreeBSD.org) Received: (from portscout@localhost) by portscout.nyi.freebsd.org (8.15.2/8.15.2/Submit) id 347FtesT087214; Sun, 7 May 2023 15:55:40 GMT (envelope-from portscout@FreeBSD.org) Message-Id: <202305071555.347FtesT087214@portscout.nyi.freebsd.org> X-Authentication-Warning: portscout.nyi.freebsd.org: portscout set sender to portscout@FreeBSD.org using -f Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Date: Sun, 7 May 2023 15:55:40 +0000 From: portscout@FreeBSD.org To: ports@freebsd.org Subject: Unmaintained FreeBSD ports which are out of date X-Mailer: portscout/0.8.1 X-ThisMailContainsUnwantedMimeParts: N Dear port maintainers, The portscout new distfile checker has detected that one or more unmaintained ports appears to be out of date. Please take the opportunity to check each of the ports listed below, and if possible and appropriate, submit/commit an update. Please consider also adopting this port. If any ports have already been updated, you can safely ignore the entry. An e-mail will not be sent again for any of the port/version combinations below. Full details can be found at the following URL: http://portscout.freebsd.org/ports@freebsd.org.html Port | Current version | New version ------------------------------------------------+-----------------+------------ cad/ifcopenshell | 0.6.0 | blenderbim-230507 ------------------------------------------------+-----------------+------------ devel/R-cran-evaluate | 0.20 | 0.21 ------------------------------------------------+-----------------+------------ If any of the above results are invalid, please check the following page for details on how to improve portscout's detection and selection of distfiles on a per-port basis: http://portscout.freebsd.org/info/portscout-portconfig.txt Reported by: portscout! From nobody Mon May 8 01:36:45 2023 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QF3mh5Xcyz49rMc for ; Mon, 8 May 2023 01:36:52 +0000 (UTC) (envelope-from simon.wright@gmx.net) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mout.gmx.net", Issuer "Telekom Security ServerID OV Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QF3mg1lLVz46Jw for ; Mon, 8 May 2023 01:36:51 +0000 (UTC) (envelope-from simon.wright@gmx.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmx.net header.s=s31663417 header.b="TrMtw/bS"; spf=pass (mx1.freebsd.org: domain of simon.wright@gmx.net designates 212.227.17.20 as permitted sender) smtp.mailfrom=simon.wright@gmx.net; dmarc=pass (policy=none) header.from=gmx.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=s31663417; t=1683509809; i=simon.wright@gmx.net; bh=OPyPX5phciUxv2Pef5lyMVC5Ol2K0dCIkMNtHjBGDiM=; h=X-UI-Sender-Class:Date:To:From:Subject; b=TrMtw/bSSPSOfB1Fajml6e/RvOoMBlhC2I+eS/tjzZoC5H9o2vwELR2iDdwcPNhOw Zixn1uFKTkeKtHj+655q9Fzg1oi4UbNxuXSJX5uHyzQX1HG0uK69y0CuEna84qrK2f zIFpcZ9vISYO7JXwp5fdSFC4aa2RpsFMgCbrhMWIafIuwKjENsytp6EjNtFjCMz+TQ nGNDvzz5udEcXQrrYTdSTLoR+KYHyMGoqcqqLOkPjs1ekDyPlptKutfcRswGzDGM0t Unw8P8KnfwsqBhXf86B829+UJ/d5+V2l2/njBB1J4FfbokVMaBqQaUGHr+mw78pZXI ldu3XuRS3KupA== X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a Received: from [192.168.79.156] ([58.69.122.55]) by mail.gmx.net (mrgmx105 [212.227.17.168]) with ESMTPSA (Nemesis) id 1MtwYu-1qCPr23ERY-00uLN5 for ; Mon, 08 May 2023 03:36:49 +0200 Message-ID: <183f50e8-38a9-c4fe-d53b-8b7f80accc23@gmx.net> Date: Mon, 8 May 2023 09:36:45 +0800 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.11.0 Content-Language: en-GB To: freebsd-ports@freebsd.org From: Simon Wright Subject: Updating libxml2 in poudriere jail Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030005090209020408050401" X-Provags-ID: V03:K1:UfGN0P9BMuKSys/XmGMaVDHJ5fIwM01AGayzbVZNDqriTW0Le7t Q2LDB3tUi2eUddxdbpN/l0boFs7g+yxf0+2yAjnOwcB5VyMERh/dcSqIpNp4Su5UTvi+1GW K9q+0nBYQoLgnh75i0y+pcA4s4jKjPsyhR6n973K8dYcp0ENWPWoTs/DzWEbx9X6Q1zJ9mn 79nlWLMqRB6V9JnUK3+IA== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:/4Q07uxEdPE=;7cZPE/YxlhKFBK1TCFF04ESeJ4A fVjmRuJP2sMbS2fDauJI5+GmNxwv0IU4tG6hKYk/zDZ8Qm0Cf8UAlS14F2UsdYo3LW9BaX0uD rmSNFX/cy35bAJBZWGChDLPShyi/396vW5f1B++7TVGR8bJ13UyJBK37jVtz7R/0J2GQghZe8 o041NhhOOufbmVCHZifMFghKcxcTl2lcfWpbL2nCJ6AxOuQKocRSfnNZEKF6f9yjrpxtA0iYs wDugCje7s/DVA3Y1EZdYrix7IENCnSsjPX3HMRRk5jOaWnydh8+3KefdXeQqAxVnLhq5+zui0 Pydm4asm5ncqdClx1QuQhiygqs1eP6rFlAGqhQOaPM4ZcYcHZK9vc5VCJRlKt1rL2vaoBipwp jJGWw+n/iVMC+LrvkFTZruSu2ffS+cDx1BTk1WjBiPb5cpRzA3VPXliK+4XvdWk69gQRL49NX mx+9BDJI23fPfiSGwh8ZT4fGVT/0bbdAekbbrXocSTc6evKq46vxaWBihgItyt3Fd5ezA4jMv 9H2Ll+/0ij2x3dkSMz4s9uyyNLG6Amoy0mHR4cCKsw9Y9QhffuzFtAni/6R4AqPQg3NpxNwuj ZrI0ArJejOm+Rv7uWD1yEHt7pYIWEvnsyTo6zIXKOELkOX4zjUIfPpVQPAW+SuoXvauD4tc9R OymlCUC0W1qAYXFeQZL3+f4rrmAJToVTPyoYJNEftyZQn4WE69xeXQikclOGQSaHE76vfWTvJ Ju2RUGuxnzbn/TF2HXIJEzGLqdk8ObkfI6iISGYvQ6s7T5agDUDNaoMAiWU5Ccii48peRus8X 66FHcKRBxWnoAGrR0EY2OlCkTNnH7AMvsglB5me7Q3rNVAnFGdvc26eJ+/9VEmWoLUh4PvT1f RUrXzOQ+DOGT2DV5oWkpcWE4wd1ek9NVyWhF2qVeYF+oI0wPnLmOy8Lh4oP9f7O5ZCg/ZCJsW qZp8YQ== X-Spamd-Result: default: False [-7.18 / 15.00]; SIGNED_SMIME(-2.00)[]; DWL_DNSWL_LOW(-1.00)[gmx.net:dkim]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-0.997]; NEURAL_HAM_SHORT(-0.98)[-0.985]; DMARC_POLICY_ALLOW(-0.50)[gmx.net,none]; R_DKIM_ALLOW(-0.20)[gmx.net:s=s31663417]; R_SPF_ALLOW(-0.20)[+ip4:212.227.17.0/27]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; RCVD_IN_DNSWL_LOW(-0.10)[212.227.17.20:from]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-ports@freebsd.org]; MLMMJ_DEST(0.00)[freebsd-ports@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; RWL_MAILSPIKE_POSSIBLE(0.00)[212.227.17.20:from]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; TO_DN_NONE(0.00)[]; HAS_ATTACHMENT(0.00)[]; FREEMAIL_FROM(0.00)[gmx.net]; RCVD_COUNT_TWO(0.00)[2]; DKIM_TRACE(0.00)[gmx.net:+]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; FREEMAIL_ENVFROM(0.00)[gmx.net]; RCVD_TLS_ALL(0.00)[] X-Rspamd-Queue-Id: 4QF3mg1lLVz46Jw X-Spamd-Bar: ------- X-ThisMailContainsUnwantedMimeParts: N This is a cryptographically signed message in MIME format. --------------ms030005090209020408050401 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable Hi all, I am using poudriere to build a small selection of posts with non-default options. This is working fine, however for the daily security run on the VM that runs poudriere, I am seeing this warning: =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Checking for security vulnerabilities in base (userland & kernel): Database fetched: Sun May 7 03:40:24 PST 2023 0 problem(s) in 0 installed package(s) found. 0 problem(s) in 0 installed package(s) found. portaudit for jails on vmserver04 - 2 problem(s) found. portaudit for jail: pkg.home.santos-wright.net (JID: 10) libxml2-2.10.3_2 (textproc/libxml2) is vulnerable: libxml2 -- multiple vulnerabilities CVE: CVE-2023-29469 CVE: CVE-2023-28484 WWW: https://vuxml.FreeBSD.org/freebsd/0bd7f07b-dc22-11ed-bf28-589cfc0f81b0.htm= l 1 problem(s) found. portaudit for jail: pkg.home.santos-wright.net (JID: 8) libxml2-2.10.3_2 (textproc/libxml2) is vulnerable: libxml2 -- multiple vulnerabilities CVE: CVE-2023-29469 CVE: CVE-2023-28484 WWW: https://vuxml.FreeBSD.org/freebsd/0bd7f07b-dc22-11ed-bf28-589cfc0f81b0.htm= l 1 problem(s) found. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D I have tried updating the jail which works but finds no updates since it is already on the latest security release: [user /etc/periodic/daily]$ sudo poudriere jail -j FreeBSD:13:amd64 -u [sudo] Enter user's password: [00:00:00] Upgrading using ftp Looking up update.FreeBSD.org mirrors... 2 mirrors found. Fetching metadata signature for 13.2-RELEASE from update1.freebsd.org... done. Fetching metadata index... done. Inspecting system... done. Preparing to download files... done. No updates needed to update system to 13.2-RELEASE-p0. 13.2-RELEASE [00:00:10] Recording filesystem state for clean... done =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D I've tried manually starting the jail, installing pkg and updating libxml2 which works but on restarting the jail, it has as expected reverted to the vulnerable version of libxml2. Can anyone point me in the right direction to eliminate the error message on the daily security scan? Or can I remove this package from the jail? Thanks, Simon. --------------ms030005090209020408050401 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DVcwggXiMIIDyqADAgECAhAzhRVh5YTUa1KYYTB3Mk/LMA0GCSqGSIb3DQEBCwUAMIGBMQsw CQYDVQQGEwJJVDEQMA4GA1UECAwHQmVyZ2FtbzEZMBcGA1UEBwwQUG9udGUgU2FuIFBpZXRy bzEXMBUGA1UECgwOQWN0YWxpcyBTLnAuQS4xLDAqBgNVBAMMI0FjdGFsaXMgQ2xpZW50IEF1 dGhlbnRpY2F0aW9uIENBIEczMB4XDTIyMDkyMjE0MjMxNVoXDTIzMDkyMjE0MjMxNVowHzEd MBsGA1UEAwwUc2ltb24ud3JpZ2h0QGdteC5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDSawb8fdlWw9nr3yNGBHFljmFbMDKuicvKplTngQyR/0AFtnrHUVwGJ5iGXbMJ 2hAInls7jXu9n1IFnMpc/l0Gsw5Bk02EMXpLGx1LKuPRoEXXFRrq5OTXYqQW3R5zc7CxhGnm xkYve7/7FXTlZF0UfC+IhYJHeTL8QAEfsAHRr7TVRtTCXiieTt687rdp1ObDCtNLnZDBfBuK +CVWVFzdDdsttzRuuHXWFCCG+jviUvOV33lFst208cVzze86Pw/xp5TDjfPQbvYSXhfrOoIk IenuhxSqy3Sl4+rja6uJTEsqnBFnnTdUJTjPiCkX8EuQtS42EpkEKdvK5rPRZOxNAgMBAAGj ggG1MIIBsTAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFL6XqaqEv4C/EFN9CTL54S4yG893 MH4GCCsGAQUFBwEBBHIwcDA7BggrBgEFBQcwAoYvaHR0cDovL2NhY2VydC5hY3RhbGlzLml0 L2NlcnRzL2FjdGFsaXMtYXV0Y2xpZzMwMQYIKwYBBQUHMAGGJWh0dHA6Ly9vY3NwMDkuYWN0 YWxpcy5pdC9WQS9BVVRIQ0wtRzMwHwYDVR0RBBgwFoEUc2ltb24ud3JpZ2h0QGdteC5uZXQw RwYDVR0gBEAwPjA8BgYrgR8BGAEwMjAwBggrBgEFBQcCARYkaHR0cHM6Ly93d3cuYWN0YWxp cy5pdC9hcmVhLWRvd25sb2FkMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDBIBgNV HR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsMDkuYWN0YWxpcy5pdC9SZXBvc2l0b3J5L0FVVEhD TC1HMy9nZXRMYXN0Q1JMMB0GA1UdDgQWBBST+tO2TbACzHF1AyJ2xCsq4Ca26TAOBgNVHQ8B Af8EBAMCBaAwDQYJKoZIhvcNAQELBQADggIBAHYOykaDn8nLxGYB1xuqydvmsm9G/xbOOSK7 eXWdPmVVgkhwAY8CafJex6sGkxoqN86Cq5nvTP1HyShgRVf4ueH8m7D73BoEopQebxFs6vfh 2Tgt5n8/wWV/pDf0UX70eBe8UlcSlA2ZFIn3Gq4+8ppCG7q/Q5+0q7RLa7hMyfVPKBNyypWr BOOzpQ5QYzJX395zYhCLSSJby5tezRPVP/8z4BRlavUwwaox6tvvAiadqgd/97/LO1VDALBX 69B44KgVqwbP6Rj+duhKImLDa2j+DCeJsnk5iCOw2KN0uBANDlkihdXxbjWtzTz/9LCVBK0+ b3X41c+W8g1MlSuoXsSkdXTjLXfdq4tCUz98GNivDGy+Icr3DNFqFlcJ0VCBiOHXamDd/SuI w7VwO9TWu343bMOJgagnYr1/BLTMx6gQb4gdZeIdmiZhEz4I2zu6O58Dv8Aj36SJ1XZo3r+k raK7lesfWjVXObxJMRdC+aH4g+AJVA0pFri0W5ENEHoGdx3xINULYmy1X77d54F4eGF1Csqn PbJ0cmQvp5NxjE6ILy128m/jbxj6mcpwgw9mAH4prrYUrj4mg/bWNoPXlVFgVpUn4SOLPbCO 9FHYaeLsTRPz7lCG2hGj59vrOwcAEuLHtps7Ap5L/RMsr/GprOJ+pGW7l0QSt1lpzb85UsyR MIIHbTCCBVWgAwIBAgIQFxA+3j2KHLXKBlGT58pDazANBgkqhkiG9w0BAQsFADBrMQswCQYD VQQGEwJJVDEOMAwGA1UEBwwFTWlsYW4xIzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4 NTIwOTY3MScwJQYDVQQDDB5BY3RhbGlzIEF1dGhlbnRpY2F0aW9uIFJvb3QgQ0EwHhcNMjAw NzA2MDg0NTQ3WhcNMzAwOTIyMTEyMjAyWjCBgTELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0Jl cmdhbW8xGTAXBgNVBAcMEFBvbnRlIFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5w LkEuMSwwKgYDVQQDDCNBY3RhbGlzIENsaWVudCBBdXRoZW50aWNhdGlvbiBDQSBHMzCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAO3mh5ahwaS27cJCVfc/Dw8iYF8T4KZDiIZJ kXkcGy8aUA/cRgHu9ro6hsxRYe/ED4AIcSlarRh82HqtFSVQs4ZwikQW1V/icCIS91C2IVAG a1YlKfedqgweqky+bBniUvRevVT0keZOqRTcO5hw007dL6FhYNmlZBt5IaJs1V6IniRjokOH R++qWgrUGy5LefY6ACs9gZ8Bi0OMK9PZ37pibeQCsdmMRytl4Ej7JVWeM/BtNIIprHwO1LY0 /8InpGOmdG+5LC6xHLzg53B0HvVUqzUQNePUhNwJZFmmTP46FXovxmH4/SuY5IkXop0eJqjN +dxRHHizngYUk1EaTHUOcLFy4vQ0kxgbjb+GsNg6M2/6gZZIRk78JPdpotIwHnBNtkp9wPVH 61NqdcP7kbPkyLXkNMTtAfydpmNnGqqHLEvUrK4iBpUPG9C09KOjm9OyhrT2uf5SLzJsee9g 79r/rw4hAgcsZtR3YI6fCbROJncmD+hgbHCck+9TWcNc1x5xZMgm8UXmoPamkkfceAlVV49Q Q5jUTgqneTQHyF1F2ExXmf47pEIoJMVxloRIXywQuB2uqcIs8/X6tfsMDynFmhfT/0mTrgQ6 xt9DIsgmWuuhvZhLReWS7oeKxnyqscuGeTMXnLs7fjGZq0inyhnlznhA/4rl+WdNjNaO4jEv AgMBAAGjggH0MIIB8DAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFFLYiDrIn3hm7Ynz ezhwlMkCAjbQMEEGCCsGAQUFBwEBBDUwMzAxBggrBgEFBQcwAYYlaHR0cDovL29jc3AwNS5h Y3RhbGlzLml0L1ZBL0FVVEgtUk9PVDBFBgNVHSAEPjA8MDoGBFUdIAAwMjAwBggrBgEFBQcC ARYkaHR0cHM6Ly93d3cuYWN0YWxpcy5pdC9hcmVhLWRvd25sb2FkMB0GA1UdJQQWMBQGCCsG AQUFBwMCBggrBgEFBQcDBDCB4wYDVR0fBIHbMIHYMIGWoIGToIGQhoGNbGRhcDovL2xkYXAw NS5hY3RhbGlzLml0L2NuJTNkQWN0YWxpcyUyMEF1dGhlbnRpY2F0aW9uJTIwUm9vdCUyMENB LG8lM2RBY3RhbGlzJTIwUy5wLkEuJTJmMDMzNTg1MjA5NjcsYyUzZElUP2NlcnRpZmljYXRl UmV2b2NhdGlvbkxpc3Q7YmluYXJ5MD2gO6A5hjdodHRwOi8vY3JsMDUuYWN0YWxpcy5pdC9S ZXBvc2l0b3J5L0FVVEgtUk9PVC9nZXRMYXN0Q1JMMB0GA1UdDgQWBBS+l6mqhL+AvxBTfQky +eEuMhvPdzAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBACab5xtZDXSzEgPp 51X3hICFzULDO2EcV8em5hLfSCKxZR9amCnjcODVfMbaKfdUZXtevMIIZmHgkz9dBan7ijGb JXjZCPP29zwZGSyCjpfadg5s9hnNCN1r3DGwIHfyLgbcfffDyV/2wW+XTGbhldnazZsX892q +srRmC8XnX4ygg+eWL/AkHDenvbFuTlJvUyd5I7e1nb3dYXMObPu24ZTQ9/K1hSQbs7pqeca ptTUjoIDpBUpSp4Us+h1I4MAWonemKYoPS9f0y65JrRCKcfsKSI+1kwPSanDDMiydKzeo46X rS0hlA5NzQjqUJ7UsuGvPtDvknqc0v03nNXBnUjejYtvwO3sEDXdUW5m9kjNqlQZXzdHumZJ VqPUGKTWcn9Hf3d7qbCmmxPXjQoNUuHg56fLCanZWkEO4SP1GAgIA7SyJu/yffv0ts7sBFrS TD3L2mCAXM3Y8BfblvvDSf2bvySm/fPe9brmuzrCXsTxUQc1+/z5ydvzV3E3cLnUoSXP6XfX NyEVO6sPkcUSnISHM798xLkCTB5EkjPCjPE2zs4v9L9JVOkkskvW6RnWWccdfR3fELNHL/ke p8re6IbbYs8Hn5GM0Ohs8CMDPYEox+QX/6/SnOfyaqqSilBonMQBstsymBBgdEKO+tTHHCMn JQVvZn7jRQ20wXgxMrvNMYID8zCCA+8CAQEwgZYwgYExCzAJBgNVBAYTAklUMRAwDgYDVQQI DAdCZXJnYW1vMRkwFwYDVQQHDBBQb250ZSBTYW4gUGlldHJvMRcwFQYDVQQKDA5BY3RhbGlz IFMucC5BLjEsMCoGA1UEAwwjQWN0YWxpcyBDbGllbnQgQXV0aGVudGljYXRpb24gQ0EgRzMC EDOFFWHlhNRrUphhMHcyT8swDQYJYIZIAWUDBAIBBQCgggItMBgGCSqGSIb3DQEJAzELBgkq hkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIzMDUwODAxMzY0NVowLwYJKoZIhvcNAQkEMSIE ICc7GV9QW11zb6DnFn7pvjcNLN4BLq/liCi4Jhz60Us9MGwGCSqGSIb3DQEJDzFfMF0wCwYJ YIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYI KoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgacGCSsGAQQBgjcQBDGBmTCB ljCBgTELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRlIFNh biBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMSwwKgYDVQQDDCNBY3RhbGlzIENs aWVudCBBdXRoZW50aWNhdGlvbiBDQSBHMwIQM4UVYeWE1GtSmGEwdzJPyzCBqQYLKoZIhvcN AQkQAgsxgZmggZYwgYExCzAJBgNVBAYTAklUMRAwDgYDVQQIDAdCZXJnYW1vMRkwFwYDVQQH DBBQb250ZSBTYW4gUGlldHJvMRcwFQYDVQQKDA5BY3RhbGlzIFMucC5BLjEsMCoGA1UEAwwj QWN0YWxpcyBDbGllbnQgQXV0aGVudGljYXRpb24gQ0EgRzMCEDOFFWHlhNRrUphhMHcyT8sw DQYJKoZIhvcNAQEBBQAEggEAljRXIYWbbAnreJBwrJ3MY+ODlP+o2C3nPm3u23Mqn48g1Sn8 teibTSkqzjLyT2hE737pgoNhbvNOJBZsJFBAGQpY7O4+swzWr1yvn2M1wP7dFLSDLgSkMOq7 b4GLXmqpR095nHWd2syM+WDMVje+kCaez7d4i73u8pU0vPs6bhdVLn1tSKwEqrypchjrkimp 0O6b2GkPAjjQ4IwdqYprHryIJLMiHh2GFCCiQzUUVAMILKgVAMwMcvRJKR9k6u7zQHTvlojn j+daMmG4sUyAq6fLhZcSfpFiPOkAOlkWRD3Eke+PwTE2DHNCsEoaNORRXZqZrhKR1Gz4eEuh ac6RZAAAAAAAAA== --------------ms030005090209020408050401-- From nobody Mon May 8 04:12:17 2023 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QF7DM5cklz49HrY; Mon, 8 May 2023 04:12:35 +0000 (UTC) (envelope-from tatsuki_makino@hotmail.com) Received: from APC01-PSA-obe.outbound.protection.outlook.com (mail-psaapc01olkn2029.outbound.protection.outlook.com [40.92.52.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QF7DL407Mz4Jv2; Mon, 8 May 2023 04:12:34 +0000 (UTC) (envelope-from tatsuki_makino@hotmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=hotmail.com header.s=selector1 header.b="d1o/D7FL"; spf=pass (mx1.freebsd.org: domain of tatsuki_makino@hotmail.com designates 40.92.52.29 as permitted sender) smtp.mailfrom=tatsuki_makino@hotmail.com; dmarc=pass (policy=none) header.from=hotmail.com; arc=pass ("microsoft.com:s=arcselector9901:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MFrlNZZpxGAmpldMyeQ7Tgm99t0jDan2R3DGNEMvF2rQJUA7DxpgzyeVu7+riptJOF4yab05zt3LeEnwRIs0LqwkyShN+0XeSEx3zQdDmLFyKnUEkt4WpQlDRdCDJ1WaWGCXAc7GPg57+zXHYh8nnno5jd5GH3JgxInw/6wU4/aT65fWKh1D9ggPM0vo3I1NGnLgNXmn6v6XIPIOWMen4liSHUjwzzqygS7g5wVN8F/v1b40uWscI+qfu0mBeLrdy15ET5kv8VMDPlY9bTDw1oM02ryo5r4yVmEbdV1McTlq58aA8kbDRYbh+Fj7AS04FovU2ZqlrFaONOucG97S4g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=gxDzo/eg46KeSQXwJAgln+GPJSCkx7QZA01bDwpfVCo=; b=WC6IsG57f8JbXw2jxXNXfGSxwbs7SO075Q/8xIZA4BcTJu/JpHJS43uYyMzl1wyyCXhixRm65gHIkmQumEq257QAW60NFBszIhD0ZqhQz8JHG+QZ8tNQLftEkbfyF6AMU+W5PWzF1FM7L58GQImg8yS9UNo/yMySD0gGMjRlyOevq9TYdAoXCxd2P6QeGrdJZ6C2zyRH+zlB0D2A58OCEnT02mptyQTec0d7vzscpDsn+EJfSs6BTOHlqTCPr4Wc4HwZkrSghT01iDuwxFqlhege/m98yG2LfNp8D28yRVQOwjirrA58mwM7ylWLwO0RyLR+/gj90K+Brl7ta0lhZA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gxDzo/eg46KeSQXwJAgln+GPJSCkx7QZA01bDwpfVCo=; b=d1o/D7FLldKG9gpf22djn9sjR9oxYXBIFLCJhY4ka6aTgR9l96lumH9H8LwLwynCOojA7kzpLquMLdrTchaA+c1c4GDl1Qs8IdzvAvUySTEoknoEqr6ZFZllQ/HEQbyi8mqOYsSX37xTj3LaqEmiWaFTJTBfgt9/DuGhlTGIfGjE2rxgTsLsMAJ4KUeo3x4jaIpG0JkqtK6Q3DSfNlx45C3+jYqIlPHUbTlB+YhlV9K/hAR8jjlyDNXI2v69c8YQHxw819JFNyaGk+tGzg5tumaeEo6BhHaizobq5uxxsAepsYBnzFGYhU4hUtC8dzunOkjiEbx1HoF9DussvSoB7g== Received: from PSAPR03MB5639.apcprd03.prod.outlook.com (2603:1096:301:66::13) by JH0PR03MB7835.apcprd03.prod.outlook.com (2603:1096:990:2d::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6363.32; Mon, 8 May 2023 04:12:30 +0000 Received: from PSAPR03MB5639.apcprd03.prod.outlook.com ([fe80::5519:737a:788f:81f8]) by PSAPR03MB5639.apcprd03.prod.outlook.com ([fe80::5519:737a:788f:81f8%5]) with mapi id 15.20.6363.032; Mon, 8 May 2023 04:12:30 +0000 Subject: FreeBSD Port: print/texlive-base: libpoppler in LIB_DEPENDS Cc: tex@FreeBSD.org To: "freebsd-ports@FreeBSD.org" From: Tatsuki Makino Message-ID: Date: Mon, 8 May 2023 13:12:17 +0900 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.4 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-TMN: [O+ny0Mbk9w9dOeE/xfKY1mGr80LaaGD6] X-ClientProxiedBy: SGXP274CA0013.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b8::25) To PSAPR03MB5639.apcprd03.prod.outlook.com (2603:1096:301:66::13) X-Microsoft-Original-Message-ID: <209c5ebc-84a7-2627-6411-9195e563a63c@hotmail.com> List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PSAPR03MB5639:EE_|JH0PR03MB7835:EE_ X-MS-Office365-Filtering-Correlation-Id: 08e34efb-f0b2-4f1e-5353-08db4f7a706b X-MS-Exchange-SLBlob-MailProps: 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 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?djArbGh5Y0JsSGh5bXZicnhTYTJpbGdycEx3bmpKWFR4ck5KdzFKV1BIZS84?= =?utf-8?B?NHBkYVIrbjU3cUdSZ2M2bGJqWm93bGRDUVR2RUZGUTFUa2NUN1pzWnN1eWx1?= =?utf-8?B?OEp0WGFZeDV5dld0YW1JeGpPUUVjUkRXTFRUN3J5VWNRdHIzRzBYak90c0RS?= =?utf-8?B?b0ZFcThuUWFXaW0wRkU5M2dMZitCWW9FT2J4cVQ0Tk41NmVtTVZQQStlMFJN?= =?utf-8?B?ZkV1eWdzTkQ4ckk4d012TVhzRkx1Uk85L2ZZM1VXV0l6Wll6VU91dzB2Z2Ry?= =?utf-8?B?R3N2NXVGMnFMejZBZVlnL2xlZitiLzh4aTJpaEZWejNzVnMyWGM5MnBwbndT?= =?utf-8?B?d3JuaEsySjhXNjV5Rm9tZURaQS95RHhWODE4V2dGSTF6T3VBMDZ4UDdvWEdE?= =?utf-8?B?RnFmZE85K0RycWhNaFRRV3VFcXlrRFRLSEVkaXpmY1FzellHRnZWVVN2ZVly?= =?utf-8?B?WXVqbnNXSnZqY2ZqaHJBTzRLaTJuUVVmc0xYTlV2SVA3NHNEQ0pDNTVjTmQ0?= =?utf-8?B?YkUyVmxsRk4wUHFoUjlMUWdSUEZha053d0FoZ3doYUM3SDVqblk0eHlHWFRy?= =?utf-8?B?UzV0SGk0WFgxeHlxaVByaEh1Z2xiNXVOSVZJT3JyM2hzVDRlKzZPOVFHYWl3?= =?utf-8?B?MmY0bHQ3ZFJrN3ExeGpQWVdZNUFTcjVRRlhSUnpmY3dBUERmbUtwWDBveXN3?= =?utf-8?B?NlR1M2lSWUVLR2ZCQVNob0JvSDQ0SHQrdlVReEpsZnJuWkljR0IweDQwR285?= =?utf-8?B?MmhndUZqcmV5YU9wWDYrOG1KTE1UVzQ5UThOZzk2Z2ZQOUpVZkNkYitMNkVI?= =?utf-8?B?Ylg3anpDanpXc3dpMHZvWlM0SCtWcGp1cmhxZ0tKNFVpWlA5QjM4cWxVcmNh?= =?utf-8?B?ZHhoT25KYk5USVRSWFlFb0RGZVBVeEFjZTNtRmNKNWh6bnE2TDFyMktDRlp3?= =?utf-8?B?YWEyNC9ZV0tBK3lJNURwVlN1STBBd082N0orazZBcmVKZ3U0NWJ5VjlUQUdn?= =?utf-8?B?RzJKeEZQTG94VmZYMlZ4NzVUUFJLUWVLdnFpUXU4NVpRRFY1S21zeXdtUHJh?= =?utf-8?B?RmpBa0t1ZWc4Tjl5Zjl2VGtCVkNhMTg0TjhhTVR4YnlGTVR4U3o5Vk1xUEw3?= =?utf-8?B?TnlWdEt2b2oyb2p6S1UyZlhYaDVTZlg4YkJpaHB0MDBtUElKNVNFcDFHd2d4?= =?utf-8?B?THE2RHpyVnlEQm9OWEpkdHpUR3N4UFZ3ekZxK2paUXV2TkJRL0RPZXF0anJC?= =?utf-8?B?bCtFTDVsTFNGVW1nZENDUEdFZVBTZU1tTzZ0Qng1NjdRT0I3QkkvUGc4WHhP?= =?utf-8?B?V1hCcnpRdkFpSnIyMmdJbDluSmZrY3NIQlMvY0h5SG5waXlHamZwZ2g1alFE?= =?utf-8?B?YVZUL3RRWnJDak9HZkIzekx4b3RWeFVTb0taOXpSZmRIM09BMDZZdXA4dUsz?= =?utf-8?B?SEMvTjJtUGR3SWRySWxQMncydXFDeS8vY2NyZzNkTk9RdkltcU11Z0NiK0tS?= =?utf-8?B?R3QvYjJtUDRkY00vdG9CNy9ubjd1RGNTOGJ3U3ZPK0JDRTJQUlBRR0VhZ3Fa?= =?utf-8?B?VG1YWHVYNjhqUDlrWk8rUUcycHpITjlVQjZHL2N0eUUwQnNCcmR3YlMwODdu?= =?utf-8?Q?pnEoKM7ptQ6cWim5Ynock3womXFvu3K0U69sYnVBBEsI=3D?= X-OriginatorOrg: sct-15-20-4734-24-msonline-outlook-c0b75.templateTenant X-MS-Exchange-CrossTenant-Network-Message-Id: 08e34efb-f0b2-4f1e-5353-08db4f7a706b X-MS-Exchange-CrossTenant-AuthSource: PSAPR03MB5639.apcprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 May 2023 04:12:29.8434 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: JH0PR03MB7835 X-Spamd-Result: default: False [-2.03 / 15.00]; FORGED_MUA_SEAMONKEY_MSGID_UNKNOWN(2.50)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector9901:i=1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-0.99)[-0.994]; NEURAL_HAM_SHORT(-0.53)[-0.535]; DMARC_POLICY_ALLOW(-0.50)[hotmail.com,none]; R_SPF_ALLOW(-0.20)[+ip4:40.92.0.0/15]; R_DKIM_ALLOW(-0.20)[hotmail.com:s=selector1]; MIME_GOOD(-0.10)[text/plain]; MLMMJ_DEST(0.00)[tex@FreeBSD.org,freebsd-ports@freebsd.org]; FROM_EQ_ENVFROM(0.00)[]; FREEMAIL_ENVFROM(0.00)[hotmail.com]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:8075, ipnet:40.80.0.0/12, country:US]; RCVD_IN_DNSWL_NONE(0.00)[40.92.52.29:from]; RWL_MAILSPIKE_POSSIBLE(0.00)[40.92.52.29:from]; DKIM_TRACE(0.00)[hotmail.com:+]; DWL_DNSWL_NONE(0.00)[hotmail.com:dkim]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; FREEMAIL_FROM(0.00)[hotmail.com]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; TO_DN_EQ_ADDR_SOME(0.00)[] X-Rspamd-Queue-Id: 4QF7DL407Mz4Jv2 X-Spamd-Bar: -- X-ThisMailContainsUnwantedMimeParts: N Hello. texlive-base-20230313_2 has library dependency on poppler-23.04.0. However, I cannot find the basis for this by running the following command. pkg info -lq texlive-base-20230313_2 | xargs readelf -d -- | grep libpoppler pkg info -lq texlive-base-20230313_2 | xargs strings -- | grep poppler If libpoppler is not used, the dependency should be eliminated. It is because when poudriere removes the poppler package, it may be causing texlive-base to be removed at the same time. Building texlive-* packages seems to have a large storage I/O cost, so I would like to avoid frequent removal. (I have CC'd to tex@ but I do not subscribe it :) ) Regards. From nobody Mon May 8 04:40:13 2023 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QF7rY2dqRz49KRX for ; Mon, 8 May 2023 04:40:29 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic315-8.consmr.mail.gq1.yahoo.com (sonic315-8.consmr.mail.gq1.yahoo.com [98.137.65.32]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4QF7rW5GhSz4N30 for ; Mon, 8 May 2023 04:40:27 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=yahoo.com header.s=s2048 header.b=RsLjzeG7; spf=pass (mx1.freebsd.org: domain of marklmi@yahoo.com designates 98.137.65.32 as permitted sender) smtp.mailfrom=marklmi@yahoo.com; dmarc=pass (policy=reject) header.from=yahoo.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1683520825; bh=I3UCQCWhX4ZGy8J8a7EYQuAtJmwRGg6tR/CWytjvvT8=; h=From:Subject:Date:To:References:From:Subject:Reply-To; b=RsLjzeG773FNynPZIy9wfO6/kSLCTVoJea0B+csibc/Y8JQMRJaxvOg2jl48m1VS0bPvQmnM6+LjCDP/455R7i7W+IPRAg/nK4Cuw8+PUMMvsM6K9zCurPt0Gzg2EiC97Oj9CXh4heQXXGtkSD0fnl8FYAdZndF+9q7HItmdYsIh2AzJoTTATCNS308sRMwwd2yIGMj65p794g0EgoN1+3w+xAxRqZMD1NWNXx9/VUkMxH4q9xCuVo6iNO8riqBTz3EAGOhg6WyqZ1luaUDKylaWNifRydS4F0qXUpDW+sqyft0n3CpKhkBk7HCu/qnMOTe/YaKO1r3T6hH87DkXSw== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1683520825; bh=9it4L8rWVJ5frH6Rfwi/4/Ua88sFDBNp1Y8a4q1aKoi=; h=X-Sonic-MF:From:Subject:Date:To:From:Subject; b=Ns0BR24VoOO0+glAqyniXZehxPVq1+Z2qKbA4rxywP7AWTDkuTSCD+ZICGdyms7ZeKYzsnrTWRGH9WNUykmXt4jGVZepUSowvD/tEQqY/ze5pShheXQGF1PKY4FAgYYTAaLGq6HauKTaYTgoHz+rlX+zbCj2ZLTxaVqO3Umwcm1CM1z8j1WNiA0LdZ5erxmJ0aY1c26Wt0c54jP0KYt3KKBqWvQ3M2Qy0/UDUJg3Tb342Fzxs7uE+cepckn3HQ/HKqE+eiPiTmWZrui7CjXx/hAfFlAP98o4OViTXe9kkZR1vDpRgjCnjxbexC/zlNiiN9ED3RC9jGnY/X/op6RLhQ== X-YMail-OSG: J1XTuZoVM1n31.k.64Skfaa4Y1LqYv1wUGE.u8prEZIfs8vnjLUdnVVEUR0NDsI 6mk6OVHuY4Pb680imjI.daXDcpHlD1wICqnXrtikeD4HGDwcfsXDxTncmyoSmIf.AUMuwUwMswN2 U1iKsErp6PXSYT3Qrxy9c_W3Rnvkwin9tBIaGSIjVqp7LQTeF7MwC1ypMD8saOuChDsjJY81Rl8E GY3WeAHV6Sp0XldpdShLTxRMvfYvb1WJRVXuj2gsG6v_uC4rL.tbBssIiZt.Sn1lJ4xTiadj74y1 dds0F5loI9pl14_9eTCq35c3SG5gQANlvAA5LoJboVwTYltzdSkl1u2PAwePUcOpUOg2WDdwvLsn XPOFBaCtbJeek76_nTfCUarcVR7KNyYlrW4tVJ0DkwZu3VbbVqiAzYS2ENmzvC9cyAGdMOtJ7jtw 90LeEh.3fd7trluSqH82Agv8rg3fF81W4k1x4U4azz4lCt48padlOqaoNEHt0P_U5HBKfoJ4u1HV KLJAOeiAJsgTNws6SwS7YDgKl94fhzswmhiRLWxf.IntegioPG8ZRF36GzevJuPqtkY9YZvcabM1 D_Im3r7LQqmgZjIvEezrQF7p7l95LQ6IJDYippwaVR4ybEiV_qPRefo03guWCs7ORNSXrU3ttMPb 3B5puLuATv9JcL71TSdKB1muXKmpUD9SGJG0GpMJB7sClPdQitqv2vTapcX7fgoB._f2lBno9aJa .OLuIcRoWN5eoo97yV7wgmtqNne28649767.1KTV3BaqR0lp20ziQD098yN6bupZND1S6Qw6VoUr dYRkABpAJ4pp3SbWX3BfQqV_r3k20PkGs1H5.qw19cvwjtrswXlGLqRrgHufMRq_K5pPfDWo9_BP MQlnCd5oJKc1MFB6zHobJf9qRY0_P0MdHRfdwwRLosma7n_DPnLg0N8xcGD.gmccT5l91OEvtvhW g4JwdM4aMxR25oLhJr6OFt3GATvRSlBw6WA.wTeqCrSw57SDCVrQTZrdIuZNFTqWZXMyi0da5cKx baaGM2caIeLZaW7uywoPw.YQP9CDCv7n2rfYVPWIhCIjVd.lkY3cPDse7YrAHvX2c62hSfcIFNNO LFzra8kglYMghRphsytqWC5GOx582rMBuCfjHmCwsNmvzy1Z2Cxa.0Y_3H0vyTe_x0rYuywybrHj LFW9BCWJ68QxWeilzJXpiEi5G5WF_A6uJnPqZN4i5HWnrCHp8BDN38Kg1cwgC8nlaXyEC_hrRNwT 6lYs0cN3LjOMGk2Q5a05z5BaeaWqUFD2YFmPtqhCJ6qCXuNyhAMcPKhxWTZOvYwLgbPjz49Klw4z j46yNEQkhq3jXDgJPCGdJnySd8evt.Ilao.UP8HyBhSQEF.DvQexKoHWeWRp7onCORrMXUUNzsd2 N.i7AQfHNpbLhzuawMmMQ2ZsscY8Imq1M1DjftvE4s3mrtXlY3SdegdiKSIYmo1rqBrzlB_cSXED 6jCHqc6Y6xrvEFf4GlXBAyXBip1SsWpr1kbCgwt6mFZAwY59trG09AXnIJGHymJnhmQ_iSmuv8bW OOfS6KGrraTJ5HrRWVOyukytgHi70uq8WhEcU0r7G3KXoxQlh4zYzFYDpQMis_riBUHYdpWCPpnu r20YvmI7Nj_CvwY705D.9k1foJ2Nlr0J7Lc03xqKIYxWZIT9Nz5wLsbxLwcy4IKtlBTqhzfpxtgw qcEfN.fPFKO1TVMXHYO4fcf3LnOhVXPHOuJzyPAndGmiwxf3Ck2mpojIsuNXHAsLjEh0sUJHsUCA IRKkgf2TCwnqXDDuGMkuvwWHp1.vKpvknNSTPom4n6SYPQ2vJkU4KW2n.Y_nfeTr65Z2mQOUtyil AvOj7nBy3j2jF0rN2qGDWylBNEGuAdy8JrwD4qWXNZUWs1TCz75gRofZ3Tnh4IL0LUDcTJFZ72q6 mQ7VvnyQx72a6Zn6k2n4on2uUML2AOwYV3_dfcO5YvPPDnxuaBtwvyh9zEvdKRzROCFAIrz9JeS. IIXhOlPMTq6bTCQzfDp_ITnwarIoK0SGg1DBr0SSzO2n_4NUGv09IjdgKZKY9P0OlxBSwfgLa6hM ltnY42Qls0Doidle6ZmXj6x.L492Drgg7VBDLYkbHtyFvZm_vwTMnY.e3iMcMjncG2QKYrgnMTkn 0X41kOH8veKR2NEtsBFCxSC0mSmTJenwtb6nfTMHRH.tRBm4zrOfQFooFPuyRkFft3U7z8_7OOSB 46nIiDvMiVFs6TZFJv0IN.ehZIz3Fg.A5oT9UgA7Ph3nBxQYaVvtfhkiOau6hR_APAtAr0dTpeiJ Bw.vYcIM- X-Sonic-MF: X-Sonic-ID: e31d6c21-076d-4ef6-a73b-e246fcadbb5a Received: from sonic.gate.mail.ne1.yahoo.com by sonic315.consmr.mail.gq1.yahoo.com with HTTP; Mon, 8 May 2023 04:40:25 +0000 Received: by hermes--production-gq1-546798879c-sq6s2 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID c2434a9654bfe27c4a5d98eef7b218dd; Mon, 08 May 2023 04:40:23 +0000 (UTC) From: Mark Millard Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\)) Subject: RE: Updating libxml2 in poudriere jail Message-Id: Date: Sun, 7 May 2023 21:40:13 -0700 To: simon.wright@gmx.net, FreeBSD Mailing List X-Mailer: Apple Mail (2.3731.400.51.1.1) References: X-Spamd-Result: default: False [-3.32 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.82)[-0.825]; MV_CASE(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[yahoo.com,reject]; R_SPF_ALLOW(-0.20)[+ptr:yahoo.com]; R_DKIM_ALLOW(-0.20)[yahoo.com:s=s2048]; MIME_GOOD(-0.10)[text/plain]; DWL_DNSWL_NONE(0.00)[yahoo.com:dkim]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[98.137.65.32:from]; RCVD_TLS_LAST(0.00)[]; FREEMAIL_ENVFROM(0.00)[yahoo.com]; MLMMJ_DEST(0.00)[freebsd-ports@freebsd.org]; RCVD_COUNT_THREE(0.00)[3]; FREEMAIL_FROM(0.00)[yahoo.com]; TO_DN_SOME(0.00)[]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US]; DKIM_TRACE(0.00)[yahoo.com:+]; FREEMAIL_TO(0.00)[gmx.net,freebsd.org]; RCPT_COUNT_TWO(0.00)[2]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[98.137.65.32:from] X-Rspamd-Queue-Id: 4QF7rW5GhSz4N30 X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N Simon Wright wrote on Date: Mon, 08 May 2023 01:36:45 UTC : > I am using poudriere to build a small selection of posts with > non-default options. This is working fine, however for the daily > security run on the VM that runs poudriere, I am seeing this warning: > > ======================= > Checking for security vulnerabilities in base (userland & kernel): > Database fetched: Sun May 7 03:40:24 PST 2023 > 0 problem(s) in 0 installed package(s) found. > 0 problem(s) in 0 installed package(s) found. > portaudit for jails on vmserver04 - 2 problem(s) found. > > portaudit for jail: pkg.home.santos-wright.net (JID: 10) > > libxml2-2.10.3_2 (textproc/libxml2) is vulnerable: > libxml2 -- multiple vulnerabilities > CVE: CVE-2023-29469 > CVE: CVE-2023-28484 > WWW: > https://vuxml.FreeBSD.org/freebsd/0bd7f07b-dc22-11ed-bf28-589cfc0f81b0.html > > 1 problem(s) found. > > portaudit for jail: pkg.home.santos-wright.net (JID: 8) > > libxml2-2.10.3_2 (textproc/libxml2) is vulnerable: > libxml2 -- multiple vulnerabilities > CVE: CVE-2023-29469 > CVE: CVE-2023-28484 > WWW: > https://vuxml.FreeBSD.org/freebsd/0bd7f07b-dc22-11ed-bf28-589cfc0f81b0.html > > 1 problem(s) found. > > ====================== > > I have tried updating the jail which works but finds no updates since it > is already on the latest security release: > > [user /etc/periodic/daily]$ sudo poudriere jail -j FreeBSD:13:amd64 -u > [sudo] Enter user's password: > [00:00:00] Upgrading using ftp > Looking up update.FreeBSD.org mirrors... 2 mirrors found. > Fetching metadata signature for 13.2-RELEASE from update1.freebsd.org... > done. > Fetching metadata index... done. > Inspecting system... done. > Preparing to download files... done. > > No updates needed to update system to 13.2-RELEASE-p0. > 13.2-RELEASE > [00:00:10] Recording filesystem state for clean... done I'm confused. textproc/libxml2 is not part of any 13.2-RELEASE-p* and so would not be updated by an update to 13.2-RELEASE-p* . > ====================== > > I've tried manually starting the jail, installing pkg and updating > libxml2 which works but on restarting the jail, it has as expected > reverted to the vulnerable version of libxml2. It is important for poudriere operation that the jail(s) it uses not have packages pre-installed. That can interfere with poudriere building ports into packages and/or with installing them as needed. (Messing up detection of what is missing and, so, needs to be built or installed.) poudriere bulk should do all its own package installations for use in all builders as I understand things. > Can anyone point me in the right direction to eliminate the error > message on the daily security scan? Or can I remove this package from > the jail? If you have packages that look to be installed in jail(s) even when poudriere is not doing the likes of a bulk build (or related), then I suggest uninstalling such. Even if such is not a (full) fix of the overall issue, as far as I know, pre-installed packages are not a valid/general solution to anything for poudriere bulk operation. === Mark Millard marklmi at yahoo.com From nobody Mon May 8 04:51:39 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QF85Z2dXYz49LLG for ; Mon, 8 May 2023 04:51:46 +0000 (UTC) (envelope-from simon.wright@gmx.net) Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mout.gmx.net", Issuer "Telekom Security ServerID OV Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QF85Y160kz4PMb for ; Mon, 8 May 2023 04:51:45 +0000 (UTC) (envelope-from simon.wright@gmx.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmx.net header.s=s31663417 header.b=ZwjGy0Bc; spf=pass (mx1.freebsd.org: domain of simon.wright@gmx.net designates 212.227.17.22 as permitted sender) smtp.mailfrom=simon.wright@gmx.net; dmarc=pass (policy=none) header.from=gmx.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=s31663417; t=1683521503; i=simon.wright@gmx.net; bh=8FHwtygWL6VN33TjDlQ2Oa3IlzSCOfyRWOFjEn7y3PY=; h=X-UI-Sender-Class:Date:Subject:To:References:From:In-Reply-To; b=ZwjGy0BchF4mO/HEO2BIz2MB2t/aLw/xk9Y20wBFY2v8AZFlcp5WiPIDgNXx3LjJL YIG115QLUEI690vyzBbTkIyNduaPA1wTrNt4z0TlHvsBxWRDqWBXNJMbNya4q7jolW 802tgnZcS9SS15nBBz2L51jM7BOuKLTFc7dLI+gjlgmbxM9VYtHtk+R3kBli3vQqbx hXpC2WtFXZQrxX8FRwnITv3jsindZTFn1A5662lnJ1ysEpjL++wcRySuGCk2OPc0dY 2yMxo/SH1AxwgFoHfxgEIwnf0raNDT6/GP4uOmN156oqQp0yZR+GHKaEuq4dvuPo7s OQaRSXd+ocAoQ== X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a Received: from [192.168.79.156] ([58.69.122.55]) by mail.gmx.net (mrgmx104 [212.227.17.168]) with ESMTPSA (Nemesis) id 1N1Obb-1qKveX3Aip-012s5y for ; Mon, 08 May 2023 06:51:43 +0200 Message-ID: Date: Mon, 8 May 2023 12:51:39 +0800 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.11.0 Subject: Re: Updating libxml2 in poudriere jail Content-Language: en-GB To: ports@freebsd.org References: From: Simon Wright In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms080808020702050909090201" X-Provags-ID: V03:K1:sW3dEXO545F+CBxHF1UK2df7ftU9SopJXkFsaHMSE2ECHBQu+pR +Xd+cWIDmPhSBfV3r4/KxrFJG+h9kEUhwwkYP0Ovk4djMkYM2ad/mZGg15AWE43ovd/fV4a WXPp1KsDUGMJ0wPDdq5+s1UUb12QGuLLbKdnZLVp6+a2hi+S5sKchgYM8yCEKMM8Qa9GVA0 gFpd2Gqm/3I/HYwiKgNhw== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:+0N+Mx+Ae30=;NnkGxQeNzXxlDnn4M7yXbirnVAk WaJ1YqmVLWglNPOvSLQD681/wqByeaYMZCk8n5K6DYFHEiHRmXHsVOyqpooDlYZtLRfjmj89Q 4wFJzQnTXJxU7t5b5DXLqJ54Jf5Vjp2Ex+LbTf7duYAzjxwD5lnM5u+75YKHuTCTItsY1vsaS jO4344DJImivROkgz79b36eRdQqY3YWVbUxOnRI/QUSxs8DQRk/oOavPxGOi/Qvfp47DW+UQC 6Q1C69AbDcEnMpDlDmT9DkkRxcCLhfiqmQbTYpGG9B3mDVabHgIgaoLVCR92iB0Amti00vZio SD6xjTn/S9QWFQgJLzpp3alM2FUzU+09AXzH+ityXpLyw5Uk2tRbmvhbesNo+T+lxbQNDf+rw OJDgH836XC3HFIum1BrtZ4VLrwDJNJSklwbtFZiR51N1em+OJCMP84OM+fdpH9fzDYW6n7sr6 akHHdzjjqMZQ8Cn3eiThpr0tcWxe/uSGL56AYE5ifS5b25uYbtCjAjQOY8RFyDek+Cl7M4lFV r1eMWqs/+fPXO+f/vgbKQdgvTMgm6JPuABDgNUarhW/Edhy/GVlOLITkmvMhpLuT6vO61LYwL YRQgd4RIWz8fhkH8rlTqOfopU+KgROvpIBMJoVJkWQdEZtvjZS3qTEXgIVcoGLhMvBRLmrGcS 5hZHgpc4nwmawIVDz/vWkf0PhPQ7eihAEwHOTJHvNNhOlPw9I+ylwGd/34VxaHfqSjWCaQzTg +fFu29ue0Slpf6IaFGvuNLqDrZ3eIcNRVcRsv6lu8a0tOoqIymd/qf9whd3WfchB9Y/ishE23 7HgsPjanYWGv4qeRfAtxVtpo7nxl0hbkPLaOHGCm5avZjtWjY7MkKIBLbewxv5/klkvFGPG0B MHBLWcs2CMrtfx5RdHR1T+HfuslSM5BdL5vbB5J2nuZ67t6uRyFgRUIMB0awrMHr6OPaC06Fi Kwy72dN8vN3n6/Ull/g3oUzzbEU= X-Spamd-Result: default: False [-6.86 / 15.00]; SIGNED_SMIME(-2.00)[]; DWL_DNSWL_LOW(-1.00)[gmx.net:dkim]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-0.997]; NEURAL_HAM_SHORT(-0.66)[-0.660]; DMARC_POLICY_ALLOW(-0.50)[gmx.net,none]; R_DKIM_ALLOW(-0.20)[gmx.net:s=s31663417]; R_SPF_ALLOW(-0.20)[+ip4:212.227.17.0/27]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; RCVD_IN_DNSWL_LOW(-0.10)[212.227.17.22:from]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[ports@freebsd.org]; MLMMJ_DEST(0.00)[ports@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; RWL_MAILSPIKE_POSSIBLE(0.00)[212.227.17.22:from]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; TO_DN_NONE(0.00)[]; HAS_ATTACHMENT(0.00)[]; FREEMAIL_FROM(0.00)[gmx.net]; RCVD_COUNT_TWO(0.00)[2]; DKIM_TRACE(0.00)[gmx.net:+]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; FREEMAIL_ENVFROM(0.00)[gmx.net]; RCVD_TLS_ALL(0.00)[] X-Rspamd-Queue-Id: 4QF85Y160kz4PMb X-Spamd-Bar: ------ X-ThisMailContainsUnwantedMimeParts: N This is a cryptographically signed message in MIME format. --------------ms080808020702050909090201 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable On 2023-05-08 12:40, Mark Millard wrote: > Simon Wright wrote on > Date: Mon, 08 May 2023 01:36:45 UTC : > >> I am using poudriere to build a small selection of posts with >> non-default options. This is working fine, however for the daily >> security run on the VM that runs poudriere, I am seeing this warning: >> >> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >> Checking for security vulnerabilities in base (userland & kernel): >> Database fetched: Sun May 7 03:40:24 PST 2023 >> 0 problem(s) in 0 installed package(s) found. >> 0 problem(s) in 0 installed package(s) found. >> portaudit for jails on vmserver04 - 2 problem(s) found. >> >> portaudit for jail: pkg.home.santos-wright.net (JID: 10) >> >> libxml2-2.10.3_2 (textproc/libxml2) is vulnerable: >> libxml2 -- multiple vulnerabilities >> CVE: CVE-2023-29469 >> CVE: CVE-2023-28484 >> WWW: >> https://vuxml.FreeBSD.org/freebsd/0bd7f07b-dc22-11ed-bf28-589cfc0f81b0.= html >> >> 1 problem(s) found. >> >> portaudit for jail: pkg.home.santos-wright.net (JID: 8) >> >> libxml2-2.10.3_2 (textproc/libxml2) is vulnerable: >> libxml2 -- multiple vulnerabilities >> CVE: CVE-2023-29469 >> CVE: CVE-2023-28484 >> WWW: >> https://vuxml.FreeBSD.org/freebsd/0bd7f07b-dc22-11ed-bf28-589cfc0f81b0.= html >> >> 1 problem(s) found. >> >> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >> >> >> I've tried manually starting the jail, installing pkg and updating >> libxml2 which works but on restarting the jail, it has as expected >> reverted to the vulnerable version of libxml2. > > It is important for poudriere operation that the jail(s) it > uses not have packages pre-installed. That can interfere with > poudriere building ports into packages and/or with installing > them as needed. (Messing up detection of what is missing and, > so, needs to be built or installed.) poudriere bulk should do > all its own package installations for use in all builders as > I understand things. > >> Can anyone point me in the right direction to eliminate the error >> message on the daily security scan? Or can I remove this package from >> the jail? > > > If you have packages that look to be installed in jail(s) > even when poudriere is not doing the likes of a bulk build > (or related), then I suggest uninstalling such. Even if > such is not a (full) fix of the overall issue, as far as > I know, pre-installed packages are not a valid/general > solution to anything for poudriere bulk operation. Thanks Mark, I also don't understand why the security scan is finding this. Manually starting the jail and checking it did not find any packages (or pkg itself) which is as expected. I use a standard poudriere build and I've never customised it other than via poudriere.conf, certainly never tried to install packages in it - other than the attempt to upgrade to fix the error listed above. Something appears to have gone bad with my poudriere install so I will delete the jail and recreate it. Seems like the easiest solution! I've already cleared out some unused ezjail jails but that did not get rid of the warning. Thanks, will come back here if deleting and recreating does not clear this up :). Simon. --------------ms080808020702050909090201 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DVcwggXiMIIDyqADAgECAhAzhRVh5YTUa1KYYTB3Mk/LMA0GCSqGSIb3DQEBCwUAMIGBMQsw CQYDVQQGEwJJVDEQMA4GA1UECAwHQmVyZ2FtbzEZMBcGA1UEBwwQUG9udGUgU2FuIFBpZXRy bzEXMBUGA1UECgwOQWN0YWxpcyBTLnAuQS4xLDAqBgNVBAMMI0FjdGFsaXMgQ2xpZW50IEF1 dGhlbnRpY2F0aW9uIENBIEczMB4XDTIyMDkyMjE0MjMxNVoXDTIzMDkyMjE0MjMxNVowHzEd MBsGA1UEAwwUc2ltb24ud3JpZ2h0QGdteC5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDSawb8fdlWw9nr3yNGBHFljmFbMDKuicvKplTngQyR/0AFtnrHUVwGJ5iGXbMJ 2hAInls7jXu9n1IFnMpc/l0Gsw5Bk02EMXpLGx1LKuPRoEXXFRrq5OTXYqQW3R5zc7CxhGnm xkYve7/7FXTlZF0UfC+IhYJHeTL8QAEfsAHRr7TVRtTCXiieTt687rdp1ObDCtNLnZDBfBuK +CVWVFzdDdsttzRuuHXWFCCG+jviUvOV33lFst208cVzze86Pw/xp5TDjfPQbvYSXhfrOoIk IenuhxSqy3Sl4+rja6uJTEsqnBFnnTdUJTjPiCkX8EuQtS42EpkEKdvK5rPRZOxNAgMBAAGj ggG1MIIBsTAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFL6XqaqEv4C/EFN9CTL54S4yG893 MH4GCCsGAQUFBwEBBHIwcDA7BggrBgEFBQcwAoYvaHR0cDovL2NhY2VydC5hY3RhbGlzLml0 L2NlcnRzL2FjdGFsaXMtYXV0Y2xpZzMwMQYIKwYBBQUHMAGGJWh0dHA6Ly9vY3NwMDkuYWN0 YWxpcy5pdC9WQS9BVVRIQ0wtRzMwHwYDVR0RBBgwFoEUc2ltb24ud3JpZ2h0QGdteC5uZXQw RwYDVR0gBEAwPjA8BgYrgR8BGAEwMjAwBggrBgEFBQcCARYkaHR0cHM6Ly93d3cuYWN0YWxp cy5pdC9hcmVhLWRvd25sb2FkMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDBIBgNV HR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsMDkuYWN0YWxpcy5pdC9SZXBvc2l0b3J5L0FVVEhD TC1HMy9nZXRMYXN0Q1JMMB0GA1UdDgQWBBST+tO2TbACzHF1AyJ2xCsq4Ca26TAOBgNVHQ8B Af8EBAMCBaAwDQYJKoZIhvcNAQELBQADggIBAHYOykaDn8nLxGYB1xuqydvmsm9G/xbOOSK7 eXWdPmVVgkhwAY8CafJex6sGkxoqN86Cq5nvTP1HyShgRVf4ueH8m7D73BoEopQebxFs6vfh 2Tgt5n8/wWV/pDf0UX70eBe8UlcSlA2ZFIn3Gq4+8ppCG7q/Q5+0q7RLa7hMyfVPKBNyypWr BOOzpQ5QYzJX395zYhCLSSJby5tezRPVP/8z4BRlavUwwaox6tvvAiadqgd/97/LO1VDALBX 69B44KgVqwbP6Rj+duhKImLDa2j+DCeJsnk5iCOw2KN0uBANDlkihdXxbjWtzTz/9LCVBK0+ b3X41c+W8g1MlSuoXsSkdXTjLXfdq4tCUz98GNivDGy+Icr3DNFqFlcJ0VCBiOHXamDd/SuI w7VwO9TWu343bMOJgagnYr1/BLTMx6gQb4gdZeIdmiZhEz4I2zu6O58Dv8Aj36SJ1XZo3r+k raK7lesfWjVXObxJMRdC+aH4g+AJVA0pFri0W5ENEHoGdx3xINULYmy1X77d54F4eGF1Csqn PbJ0cmQvp5NxjE6ILy128m/jbxj6mcpwgw9mAH4prrYUrj4mg/bWNoPXlVFgVpUn4SOLPbCO 9FHYaeLsTRPz7lCG2hGj59vrOwcAEuLHtps7Ap5L/RMsr/GprOJ+pGW7l0QSt1lpzb85UsyR MIIHbTCCBVWgAwIBAgIQFxA+3j2KHLXKBlGT58pDazANBgkqhkiG9w0BAQsFADBrMQswCQYD VQQGEwJJVDEOMAwGA1UEBwwFTWlsYW4xIzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4 NTIwOTY3MScwJQYDVQQDDB5BY3RhbGlzIEF1dGhlbnRpY2F0aW9uIFJvb3QgQ0EwHhcNMjAw NzA2MDg0NTQ3WhcNMzAwOTIyMTEyMjAyWjCBgTELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0Jl cmdhbW8xGTAXBgNVBAcMEFBvbnRlIFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5w LkEuMSwwKgYDVQQDDCNBY3RhbGlzIENsaWVudCBBdXRoZW50aWNhdGlvbiBDQSBHMzCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAO3mh5ahwaS27cJCVfc/Dw8iYF8T4KZDiIZJ kXkcGy8aUA/cRgHu9ro6hsxRYe/ED4AIcSlarRh82HqtFSVQs4ZwikQW1V/icCIS91C2IVAG a1YlKfedqgweqky+bBniUvRevVT0keZOqRTcO5hw007dL6FhYNmlZBt5IaJs1V6IniRjokOH R++qWgrUGy5LefY6ACs9gZ8Bi0OMK9PZ37pibeQCsdmMRytl4Ej7JVWeM/BtNIIprHwO1LY0 /8InpGOmdG+5LC6xHLzg53B0HvVUqzUQNePUhNwJZFmmTP46FXovxmH4/SuY5IkXop0eJqjN +dxRHHizngYUk1EaTHUOcLFy4vQ0kxgbjb+GsNg6M2/6gZZIRk78JPdpotIwHnBNtkp9wPVH 61NqdcP7kbPkyLXkNMTtAfydpmNnGqqHLEvUrK4iBpUPG9C09KOjm9OyhrT2uf5SLzJsee9g 79r/rw4hAgcsZtR3YI6fCbROJncmD+hgbHCck+9TWcNc1x5xZMgm8UXmoPamkkfceAlVV49Q Q5jUTgqneTQHyF1F2ExXmf47pEIoJMVxloRIXywQuB2uqcIs8/X6tfsMDynFmhfT/0mTrgQ6 xt9DIsgmWuuhvZhLReWS7oeKxnyqscuGeTMXnLs7fjGZq0inyhnlznhA/4rl+WdNjNaO4jEv AgMBAAGjggH0MIIB8DAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFFLYiDrIn3hm7Ynz ezhwlMkCAjbQMEEGCCsGAQUFBwEBBDUwMzAxBggrBgEFBQcwAYYlaHR0cDovL29jc3AwNS5h Y3RhbGlzLml0L1ZBL0FVVEgtUk9PVDBFBgNVHSAEPjA8MDoGBFUdIAAwMjAwBggrBgEFBQcC ARYkaHR0cHM6Ly93d3cuYWN0YWxpcy5pdC9hcmVhLWRvd25sb2FkMB0GA1UdJQQWMBQGCCsG AQUFBwMCBggrBgEFBQcDBDCB4wYDVR0fBIHbMIHYMIGWoIGToIGQhoGNbGRhcDovL2xkYXAw NS5hY3RhbGlzLml0L2NuJTNkQWN0YWxpcyUyMEF1dGhlbnRpY2F0aW9uJTIwUm9vdCUyMENB LG8lM2RBY3RhbGlzJTIwUy5wLkEuJTJmMDMzNTg1MjA5NjcsYyUzZElUP2NlcnRpZmljYXRl UmV2b2NhdGlvbkxpc3Q7YmluYXJ5MD2gO6A5hjdodHRwOi8vY3JsMDUuYWN0YWxpcy5pdC9S ZXBvc2l0b3J5L0FVVEgtUk9PVC9nZXRMYXN0Q1JMMB0GA1UdDgQWBBS+l6mqhL+AvxBTfQky +eEuMhvPdzAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBACab5xtZDXSzEgPp 51X3hICFzULDO2EcV8em5hLfSCKxZR9amCnjcODVfMbaKfdUZXtevMIIZmHgkz9dBan7ijGb JXjZCPP29zwZGSyCjpfadg5s9hnNCN1r3DGwIHfyLgbcfffDyV/2wW+XTGbhldnazZsX892q +srRmC8XnX4ygg+eWL/AkHDenvbFuTlJvUyd5I7e1nb3dYXMObPu24ZTQ9/K1hSQbs7pqeca ptTUjoIDpBUpSp4Us+h1I4MAWonemKYoPS9f0y65JrRCKcfsKSI+1kwPSanDDMiydKzeo46X rS0hlA5NzQjqUJ7UsuGvPtDvknqc0v03nNXBnUjejYtvwO3sEDXdUW5m9kjNqlQZXzdHumZJ VqPUGKTWcn9Hf3d7qbCmmxPXjQoNUuHg56fLCanZWkEO4SP1GAgIA7SyJu/yffv0ts7sBFrS TD3L2mCAXM3Y8BfblvvDSf2bvySm/fPe9brmuzrCXsTxUQc1+/z5ydvzV3E3cLnUoSXP6XfX NyEVO6sPkcUSnISHM798xLkCTB5EkjPCjPE2zs4v9L9JVOkkskvW6RnWWccdfR3fELNHL/ke p8re6IbbYs8Hn5GM0Ohs8CMDPYEox+QX/6/SnOfyaqqSilBonMQBstsymBBgdEKO+tTHHCMn JQVvZn7jRQ20wXgxMrvNMYID8zCCA+8CAQEwgZYwgYExCzAJBgNVBAYTAklUMRAwDgYDVQQI DAdCZXJnYW1vMRkwFwYDVQQHDBBQb250ZSBTYW4gUGlldHJvMRcwFQYDVQQKDA5BY3RhbGlz IFMucC5BLjEsMCoGA1UEAwwjQWN0YWxpcyBDbGllbnQgQXV0aGVudGljYXRpb24gQ0EgRzMC EDOFFWHlhNRrUphhMHcyT8swDQYJYIZIAWUDBAIBBQCgggItMBgGCSqGSIb3DQEJAzELBgkq hkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIzMDUwODA0NTEzOVowLwYJKoZIhvcNAQkEMSIE IOgl7ts3IDIlmfHXIfG6uaEGrTvPW6peKN8lDEKvR35bMGwGCSqGSIb3DQEJDzFfMF0wCwYJ YIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYI KoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgacGCSsGAQQBgjcQBDGBmTCB ljCBgTELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRlIFNh biBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMSwwKgYDVQQDDCNBY3RhbGlzIENs aWVudCBBdXRoZW50aWNhdGlvbiBDQSBHMwIQM4UVYeWE1GtSmGEwdzJPyzCBqQYLKoZIhvcN AQkQAgsxgZmggZYwgYExCzAJBgNVBAYTAklUMRAwDgYDVQQIDAdCZXJnYW1vMRkwFwYDVQQH DBBQb250ZSBTYW4gUGlldHJvMRcwFQYDVQQKDA5BY3RhbGlzIFMucC5BLjEsMCoGA1UEAwwj QWN0YWxpcyBDbGllbnQgQXV0aGVudGljYXRpb24gQ0EgRzMCEDOFFWHlhNRrUphhMHcyT8sw DQYJKoZIhvcNAQEBBQAEggEAlOQTXesjUg3vYOve5TE+bobEDRFJhMasm68FgxXl/EzIlX3U j98rgR026G6z0H+v8TDG7OAFtRnkoyGX/ezSMNjRz0PQcyBs5Yw6GTwKeoWgs5ZjzllisL0a JcFDqwJ+wJ81Jr2KB0Omo+NM5GkA5k5avxXf2DBZXLjNU5/RdCFxxY5gL7mRqba175STjlKn xypwl9Cfsu4BgYhRy5X8q65XBsitC/h6ToUS+lsF6VbSJV30O3sjJXi1LPwWPrnM5jP/MUhs AMVsHWjA34bh5ZBNCDegjD0OInGTH46dD6xF8jsoynxIm7dsxI39pe9llOkLMjGu7pwaHPLb 87TkqQAAAAAAAA== --------------ms080808020702050909090201-- From nobody Mon May 8 05:18:40 2023 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QF8j06ccWz49MND for ; Mon, 8 May 2023 05:19:00 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic305-19.consmr.mail.gq1.yahoo.com (sonic305-19.consmr.mail.gq1.yahoo.com [98.137.64.82]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4QF8hz4LCgz3CLS for ; Mon, 8 May 2023 05:18:59 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=yahoo.com header.s=s2048 header.b=jhnLRhBs; spf=pass (mx1.freebsd.org: domain of marklmi@yahoo.com designates 98.137.64.82 as permitted sender) smtp.mailfrom=marklmi@yahoo.com; dmarc=pass (policy=reject) header.from=yahoo.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1683523137; bh=fdzuug7Ke7UkDeMkNqsMo4xk+B7O+Oij6nZDFAC8KPI=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From:Subject:Reply-To; b=jhnLRhBs0c4eVGsczrPlVs0qcg55Jv5RfJDarAH+1iMuu41jkvd67egV5ZYuW6sCeaGZ836Tcxj9gmaQ4ie6ZPNqe8XIkErkzHtm+McxTIUXQqgWFUIpQ6Z70mWJThQlh0JkmiW07D9Gu2ihp8fBsER5L2vwSr/A3hSPJ/ppzLiRdn3FKlm4B46qB4lwGIZnmfqat0yRoi94RBirEBcApm3MbTI8vv+qNfylYeN6nrCS2HX6uujRLIyd3CVLTo/YUCKejP//o/6XVlkZt+sbWKuSE8iOi6WpmJZ41ZpNKd62Rqxs7vlGjApovEoxtOxLC5PkGm6g+LT5DWPhjVIJPQ== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1683523137; bh=Y16Xrp2PJkb64iBJYNerZ2IDpwU46vdAOm3ziu+TaHC=; h=X-Sonic-MF:Subject:From:Date:To:From:Subject; b=HJha9yQ9g21EFqYnK9uDtYxoYVsfCWY4UK8dAi+WSxtThR8atVD25YZMdo38cV+DJUSLSsyNN6z5uEaNSIbqUZH97ZgIEwEZe/G4jwIntuefcVrv3LvxzezAMQNpsCN0igyv4OUdX+6/FcJKrMaOdHZYebq3SHWzvn5V/D2eRujREGO8DqEfZ4omPFPTito2SnZSte1naKzES6pE27jCrYrB3faphyw9xmPcekdpuh6Js6IJphVDScrkmtsOPJoHvX9p+1QQXwbs9N7xpaJDDWgANuuNPjvzg+xL1e+0YCFmbxcz/2Ees5Ryks9pMAclyXEKOhyWeCWVKidcba4wDg== X-YMail-OSG: rwrX.kMVM1n1ft95s.SRZvy97W3bswLaXyJ5xftdXpOhUg7CDjP_kbOO5JWO.D1 qP5LngpCozrDkRt452bRI8reEKuzd9TimzVXD0Vpl42GymwG1NubaqZ9zTCEgU2D82VfHj7t9ZK2 xTuSqDNdvZk.4SmULYyWvGVPgY.Pmno1Fm81ZDEWC7Po8UvxYSMeNXoF4WCfN_Np2Fqo6cmqwXHX JzUk5ia.mjlM3nN__QFKelgOn4ojCJIDxXt7ZpxQdgfuP9iBsXKQKEqI7kJltluzNAEWCYnniL2t cdt8rSYUBmllkCESZxfi8B3VVdIGCBZCJEr8c7b3vGHqqofZsDw8BcrcALSeuQhOcQsavzZ5THZO .duNREso00d0fhSZFt9JScGvqJ3UUdlrU7Va8GUTEf7eYhEqQ4W0UJU4tryn1iXoisLo8heuyl.4 mweUUV5k9q2QrvYPCoZ8cGbKYO4tC6m5xJE5tm4S7tMVpNdk3agCxf8Etl.JRPNZX4s0Ttx2hB1E 4Vw7jOImaRdUalpNkdgpOrf6cTBVP3RG.b.4FVmGpMiyHXnV8BKnNlFTkAyorMgtkOTyX1WXSBmZ l.vz1gbMkiPRxKiJfogfFgcmAi6Jl.ZYVWveVE5QtirnzvmQN7coCg5YxWjkyvBqT9qVZSu4m89z C.hRRH9s8LO0QOQrqO_Svv_1ZfVh4DCuaSKNsVV44AHYCQ9vywA0VafYqxJk3nOvyVD3h8lgnDt_ s8Y88pqZeQ5VvhxCRJ5jhoMV0gOy3jwPscePJPlGCIJG4fUMi4ya4oaF_6KvdaQzwUpYThF0DLw1 XREsOHgp10rYbS2gkMsICdN3z7saCUUmpGzvwPty0OROXLXJEa9n6J3o9UlQbCmnyqTTjpDcpg7J IACtN7bKuIcTtK.toqSd7MnE5reAt.7zXwaHXzVcuHyviY1PxQNEjTkNecRelUqnt49fLBgTP1s2 PeS68aHQteXmOugoF2CR8uSB7661K8KL2ycLlZOIJAVA6m1wCv_XoSnC5P90W7xBE_ajn2hCDM_l AlMcllxn3YS.X9RMlE0yVjwDXuC185TeYKrjwUI4lhMzH5uVmny8Tf9r.U8I_jSJVzvItbHy.7At cmpd1UAQZOthgL5QE_eEEnw5gYSc85bb1SrhrwLoOLFbhZzdzFy.AQ2i7gHyrpKKRUQIfLwWBzjB 9TMKARqrGPFNeSWJ5hhQOCPt7rjc7q9mya6Ncacqi9mry.Lar.ScTKiP2eQYfVGFGHqk7blinvx9 Tmz_hlTKE4zj_odhRbMNElhazW8nvOboyM45.zyyri9wjHRzLD9xfXFsZhMHWO86sx__NmaJxNzI 4N7mde2emKe9zmAWmF_Oa6nPtshEwHh9HY3UJDrVNflLetzJzjP3MyPe3uEXwTIM8X31vEYkAuPG mZ26wfOycPdF3SPtmDqUOwP2bFtyoDxAxP85DnpKsJEnC.oqmkKCjt25A1dXZra8ptMUPTtfEq_p KoCEgj2ztbYtTMGeakAeRcEHjsZoHHHf77toL57yNtLlmw4NPiXa.ie5Zkem.9bhNCIb067XDziY bM2Oh5NKudVjO6SVQnGhKaRXlg3y2ul.Dg0I7.lVyUqx9NEjVpY.Z4hO2At21CXEujaapR9KZ6r8 ZgcSOwAqQkFbkI5HqXHlJJ9YFHKHPJLwuy4a9qI1QOs9iiKWfxclPUTLxzhftLc9UNUn5bjEYhlT jRsvzdwhKpXr4O_exJu0CkERbsfQYynXFBB7SoP3UMdJbdDB8ZxZA97X2CfqHAs1VKsYJDFiV5wz _1NssKCvqN_GbqOB3qmIE.kjqoJKX_iZIJ.L1Z9hV4zoijd3RYZ.SM8gv1S1tAoJ9wMrhzLNkJrH _UZfhFvHRwtz.sBONDwF8_MSz7f.ZpZNDqVGXyinEJrlafk4kQ0O14S9AcIG4orHik7p1pw_CdXn PYQ2wfMcLoXbwErzenUgPoN_7g4iQ2MdZNa6us3m8LvYJF98_6t_VS46Vn6GenNpVg3xvpcuyYnb 5AFwgRUXOOxX6IhmzTuoX2W9.k2VUSRgG7yBvUxDuEzda6.BKQ59SS6yoTXkSZMraZDPNBoptcjK _Uib_kU87SnPNrbSIAelj9NefFmzK7RZKARL1hPQJcyFVlf_roj_ijtBzeLZFbqfGEV6dRXL4X8L ooQptB4F67IKkThIfBf6jlETPGc9bRTo7.tX53IJw6MIVQzLAfBYPvVdBWTXSxBlaOG.Az.IHpzG M_Ox7uIvZIqkVTnHsDTEXI.JM8xxc5gOOvETG42mP.nRyZcC63OtdQLG2dgcmTzhg19t.8rIvFOg j X-Sonic-MF: X-Sonic-ID: 2dd4a00b-986c-48e7-ba0f-3a93d7648585 Received: from sonic.gate.mail.ne1.yahoo.com by sonic305.consmr.mail.gq1.yahoo.com with HTTP; Mon, 8 May 2023 05:18:57 +0000 Received: by hermes--production-bf1-5f9df5c5c4-84ds6 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 860471ac651c7dc86c2aaf05c96da684; Mon, 08 May 2023 05:18:52 +0000 (UTC) Content-Type: text/plain; charset=us-ascii List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\)) Subject: Re: git for armv7 From: Mark Millard In-Reply-To: Date: Sun, 7 May 2023 22:18:40 -0700 Cc: FreeBSD Mailing List Content-Transfer-Encoding: quoted-printable Message-Id: <83AFC022-1156-475F-B73F-4C69261A5B0A@yahoo.com> References: To: bob prohaska X-Mailer: Apple Mail (2.3731.400.51.1.1) X-Spamd-Result: default: False [-2.59 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[yahoo.com,reject]; MV_CASE(0.50)[]; R_SPF_ALLOW(-0.20)[+ptr:yahoo.com]; R_DKIM_ALLOW(-0.20)[yahoo.com:s=s2048]; MIME_GOOD(-0.10)[text/plain]; NEURAL_HAM_SHORT(-0.09)[-0.092]; ARC_NA(0.00)[]; DWL_DNSWL_NONE(0.00)[yahoo.com:dkim]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_TLS_LAST(0.00)[]; FREEMAIL_ENVFROM(0.00)[yahoo.com]; RCVD_IN_DNSWL_NONE(0.00)[98.137.64.82:from]; TO_DN_ALL(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; FREEMAIL_FROM(0.00)[yahoo.com]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US]; DKIM_TRACE(0.00)[yahoo.com:+]; FROM_EQ_ENVFROM(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; MIME_TRACE(0.00)[0:+]; MLMMJ_DEST(0.00)[freebsd-ports@freebsd.org] X-Rspamd-Queue-Id: 4QF8hz4LCgz3CLS X-Spamd-Bar: -- X-ThisMailContainsUnwantedMimeParts: N On May 6, 2023, at 17:55, bob prohaska wrote: > On Sat, May 06, 2023 at 12:45:55PM -0700, Mark Millard wrote: >> bob prohaska wrote on >> Date: Sat, 06 May 2023 18:43:52 UTC : >>=20 >>> Pkg search git now reports >>> pkg: repository FreeBSD contains packages for wrong OS version: = FreeBSD:14:armv7 >>> when run from a -current host which identifies itself as: >>> FreeBSD www.zefox.com 14.0-CURRENT FreeBSD 14.0-CURRENT #22 = main-1d35493e46: Tue Apr 18 06:23:00 PDT 2023 = bob@www.zefox.com:/usr/obj/usr/src/arm.armv7/sys/GENERIC arm=20 >=20 > It looks as if I did catch the server at a bad time. A re-run of=20 > pkg search now produces different results. Long list, but no git=20 > (without hyphenated qualifiers). >>=20 >> What does: >>=20 >> # pkg info pkg >>=20 >> report?=20 > bob@www:~ % pkg info pkg > pkg-1.19.1_1 > Name : pkg > Version : 1.19.1_1 > Installed on : Mon Mar 13 11:14:54 2023 PDT > Origin : ports-mgmt/pkg > Architecture : FreeBSD:14:armv7 > Prefix : /usr/local > Categories : ports-mgmt > Licenses : BSD2CLAUSE > Maintainer : pkg@FreeBSD.org > WWW : https://github.com/freebsd/pkg > Comment : Package manager > Options : > DOCS : on > Shared Libs provided: > libpkg.so.4 > Annotations : > FreeBSD_version: 1400081 > repo_type : binary > repository : FreeBSD > Flat size : 30.1MiB > Description : > Package management tool >=20 > WWW: https://github.com/freebsd/pkg >=20 >=20 >=20 >=20 >> What does: >>=20 >> # more /usr/local/etc/pkg/repos/FreeBSD.conf >>=20 >> report?=20 > b@www:~ % more /usr/local/etc/pkg/repos/FreeBSD.conf > FreeBSD: { > enabled: yes=20 > } >=20 >=20 >> What does: >>=20 >> # more /usr/local/etc/pkg/repos/custom.conf >>=20 >> report?=20 >=20 > bob@www:~ % more /usr/local/etc/pkg/repos/custom.conf > custom: { > url: "file:///usr/local/poudriere/data/packages/main-default/", > enabled: no=20 > } >=20 >> What does: >>=20 >> # more /etc/pkg/FreeBSD.conf >>=20 >> report? >>=20 >=20 > bob@www:~ % more /etc/pkg/FreeBSD.conf > # $FreeBSD$ > # > # To disable this repository, instead of modifying or removing this = file, > # create a /usr/local/etc/pkg/repos/FreeBSD.conf file: > # > # mkdir -p /usr/local/etc/pkg/repos > # echo "FreeBSD: { enabled: no }" > = /usr/local/etc/pkg/repos/FreeBSD.conf > # >=20 > FreeBSD: { > url: "pkg+http://pkg.FreeBSD.org/${ABI}/latest", > mirror_type: "srv", > signature_type: "fingerprints", > fingerprints: "/usr/share/keys/pkg", > enabled: yes > } >=20 >=20 >>> At this point -current and 14 seem likely to be quite close. >>=20 >> 14 has not branched yet: 14.0-CURRENT is all there is for 14. >> There is no other CURRENT (main). >>=20 >> The issue goes in some other direction. >>=20 >>> Can pkg be persuaded to install the available version as an >>> experiment? >>=20 >> Figuring that out may require figuring out why the >> "wrong OS version: FreeBSD:14:armv7" was generated. >=20 > Given the non-repeat of the message which motivated my > question it seems best to simply wait. Hopefully some > sort of "git-lite" will become part of base, as with > svn.=20 >=20 Places to go to see build status include: https://www.freshports.org/devel/libunwind/ (FreeBSD:14:aarch64 20211201_2) https://www.freshports.org/devel/git/ (FreeBSD:14:aarch64 2.40.0) Hovering over the likes of "2.40.0" shows dates, such as a "repo build date" of 2023-May-01 13:08. That would be: ( looking on https://pkg-status.freebsd.org/?all=3D1&type=3Dpackage ) p519c178336e5_scb3c414f2f Started: Tue, 25 Apr 2023 03:04:56 GMT Elapsed: 154:14:09 (about 6.4 days) But that is not the time of updating the distribution server(s) that you happen to use. FYI: build of devel/git | git-2.40.0 ended at Tue Apr 25 17:48:23 UTC 2023 (so fairly early in the bulk build) It looks reasonable to be checking for git, git-lite, or git-tiny on a regular basis at this point. =3D=3D=3D Mark Millard marklmi at yahoo.com From nobody Mon May 8 15:56:09 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QFQr94fzFz4B410 for ; Mon, 8 May 2023 15:56:09 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QFQr92kGKz3Ngp for ; Mon, 8 May 2023 15:56:09 +0000 (UTC) (envelope-from portscout@FreeBSD.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683561369; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=eUTr2Z09mWEe+rJ/yfpEHFi7V6F4g9BxbxIQSFsnd5E=; b=tkKetPyr0PQNv2irBxNunUA9/nakwFz9NootYJF9vY0evLToMkwgozBH81CaKI3HSEZuw9 VBcaJxw7ZnMZ624sV2n3TmZBvHMOk0nNPF8bPJA687UuFKJpzXhzY6ZPHgQQqMjauX/rAa 3h/x0rCkbSvxiWGkeE5y4oT4PC3Q/QKiuIIGYPoVognXUd2I3QIHBq/wphm9TEMnrW5DR8 lmYI9KigMW7dPfRpqVjwR/8NWVzdK4biiZpIgIm89HBKI/v0Zz2OTaHoWQtmG6Km0wItMe rW/uOazRGSCJ0tfXBX8npFMNGNTXZaSi/ZUV4MXLe5KECOA1pHYU+rH3MVPQ7g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683561369; a=rsa-sha256; cv=none; b=VGouNIINO0CDjDQXhoIvbSD7m9ZJS1u4of14tKiD6Vt874IMSUMA9Cz9y344eXrYWfXQ2K b1IcrT5gcG0+3WocUZO8DjBj7wCFLR12pHChBz8+9wjGdoW3zBfggzN5yhunZRfGduhDG0 fO293fQqz5uKx2QxB/c2NHNCAhrZ9uR7PLtbu3ty5A3IslR5+F49HaawV4VnUvqNRBrb6O 7+YyStVEEYDbSbjjA1veaDr043c5zwElO4XcjnCF8/nffBlgZ/Ad21TUFl3Ln2ZWgkbBqT KV7CtlqA0RvHp6AdW/pxpnQHKrYLW/J7iNaXL92MFkoXuIs4FZEtMMs0zeDT3A== Received: from portscout.nyi.freebsd.org (portscout.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QFQr91V9Lz15rg for ; Mon, 8 May 2023 15:56:09 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from portscout.nyi.freebsd.org ([127.0.1.10]) by portscout.nyi.freebsd.org (8.15.2/8.15.2) with ESMTP id 348Fu9h3092276 for ; Mon, 8 May 2023 15:56:09 GMT (envelope-from portscout@FreeBSD.org) Received: (from portscout@localhost) by portscout.nyi.freebsd.org (8.15.2/8.15.2/Submit) id 348Fu9tN092275; Mon, 8 May 2023 15:56:09 GMT (envelope-from portscout@FreeBSD.org) Message-Id: <202305081556.348Fu9tN092275@portscout.nyi.freebsd.org> X-Authentication-Warning: portscout.nyi.freebsd.org: portscout set sender to portscout@FreeBSD.org using -f Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Date: Mon, 8 May 2023 15:56:09 +0000 From: portscout@FreeBSD.org To: ports@freebsd.org Subject: Unmaintained FreeBSD ports which are out of date X-Mailer: portscout/0.8.1 X-ThisMailContainsUnwantedMimeParts: N Dear port maintainers, The portscout new distfile checker has detected that one or more unmaintained ports appears to be out of date. Please take the opportunity to check each of the ports listed below, and if possible and appropriate, submit/commit an update. Please consider also adopting this port. If any ports have already been updated, you can safely ignore the entry. An e-mail will not be sent again for any of the port/version combinations below. Full details can be found at the following URL: http://portscout.freebsd.org/ports@freebsd.org.html Port | Current version | New version ------------------------------------------------+-----------------+------------ www/R-cran-httpuv | 1.6.9 | 1.6.10 ------------------------------------------------+-----------------+------------ If any of the above results are invalid, please check the following page for details on how to improve portscout's detection and selection of distfiles on a per-port basis: http://portscout.freebsd.org/info/portscout-portconfig.txt Reported by: portscout! From nobody Mon May 8 16:39:41 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QFRpT32kPz4B6Jh for ; Mon, 8 May 2023 16:39:45 +0000 (UTC) (envelope-from zirias@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QFRpT2WfTz3jKB for ; Mon, 8 May 2023 16:39:45 +0000 (UTC) (envelope-from zirias@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683563985; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=IwukFgSt3Fl0p1DCXJSM3igxzqMFhg/JiHYJ1CjtgB4=; b=Rhx8qfHp4fFaydpLzEoKPsZuSkcKa736fS4W2YMq1BiP/rqlG9CnWDV8oqtjYSRy2bHG7m ULeQvXaMrcfJXqkaqDThEhNnDIwssXZ2wovGWD+pR2EZx6GqSr9r2tg0NtUIyC4dZwnAu1 RD7Ovov/QAJtGd4A+/H+iqEETWIu9Uw+HXu/eRMPduz1miMm7U8XQaQBcpEPb4hlU54kMP orAzhg4av60l234qIZsbHZCtuP7hHPcRqMf3rtm2LwNb+f3+91Cbulmh7rxHrNDN4TsDyy ziuyJywevMvYkn+y28Dvxdjr1WDFRZZAXHZdYvIGWL+6kDVn200JdXF5Fc2ojA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683563985; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: dkim-signature; bh=IwukFgSt3Fl0p1DCXJSM3igxzqMFhg/JiHYJ1CjtgB4=; b=wNxff9TW/70Yt62sDlewb8dxh+QnEXfMIWTzjjMZT9ka6UUBIfXb5yifxqlR+vtUm+ulHd DSUb2aO3OToC5sZ720g5MZrJxTxZpqLQh3x6Bbnus+8hkAxiZ6nG144n0UozzrtWeReIix +gvrWXzz1be9tC0z5YE8l4is0FtxqcCh1rrj6HL78eBnzvelxunBW98H1qyyb6+AoL7ezU XIJV1oIKEsXqhV9d43dkDqrp0AXRmUrAgw9zT7Dk2ny4OMx50Xts3xMDK3pe7RzOyZQA40 QP6oK5ac8UDneh/nOEYkl5NPBib6JQwfFEQOrzCYJ73fldizWHIB66QYD5VQ5A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683563985; a=rsa-sha256; cv=none; b=Oa4xGwa3IXekoM6+KkKYSwPxcD4zzsYo0UrS2R/gKv8k+0XBWvUstz9OMAK9mGSxv5fhWA oUIuvxHUAeQJL4S6LPBYajjscsCeMb/r7v3muNJ5INsaM2HRrFrICxFKMJnEb7uKNBjGmd IAw22rDDb/xi2/npF3PKuzN+89FlUUh9St2tKrV9hzbLaThXBn94lEJOU/aE8HDXOCPdJv r3BLUTskgBPET+udIkHWXhpNXG9JdMGaM2dFutDeHmYGexLZAzj8LFddmdzmmIE4rSZxXv TNPuB7fXcEYdnVWLtqfFU8jYFbj/ocWYVk/2t1flxbIXjYypW0ZoPWpF9J0thA== Received: from stef.palmen-it.de (stef.palmen-it.de [IPv6:2001:470:1f0b:bbb:1::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: zirias/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4QFRpT1W5mztkC for ; Mon, 8 May 2023 16:39:45 +0000 (UTC) (envelope-from zirias@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=palmen-it.de; s=20200414; h=Content-Type:MIME-Version:Message-ID:Subject:To :From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=IwukFgSt3Fl0p1DCXJSM3igxzqMFhg/JiHYJ1CjtgB4=; b=COrf97QXx0fa2JeSsCF6h4Vg4F z+4l0dvCQvjjrrCYdWvHiqGb5+MZ7CfnKUvregED7WslsU732qPM5oEX64AuXjkzeePtWzu2MWoq+ eRm7cR2lcRoQNznOZA9cLTC/Y3Y80f+U+RCzQOmARo8wzu/7qmffe6kLlTkSZLj5iOIIv4wk5m7LS pkNXwRQDUrSNIXA0m7NoWzFq1YucvqdKoNnul2Wv/2S8laI9G8UZ0apXk7tdFeglmfHBQTsX6RA8q UEbPZUZip0g0Ejm56TWMZpil/9OxjDTOc2P86hkn4vTRHVHUgZkG2P2v29ocSALESmzieuc5HI5pf 0YzXOIHg==; Received: from [192.168.71.101] (helo=mail.home.palmen-it.de) by stef.palmen-it.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1pw3tm-000hEt-GH for ports@FreeBSD.org; Mon, 08 May 2023 18:39:42 +0200 Received: from nexus.home.palmen-it.de ([192.168.99.2]) by mail.home.palmen-it.de with esmtpsa (TLS1.3) tls TLS_CHACHA20_POLY1305_SHA256 (Exim 4.95 (FreeBSD)) (envelope-from ) id 1pw3tm-0003JB-32 for ports@FreeBSD.org; Mon, 08 May 2023 16:39:42 +0000 Date: Mon, 8 May 2023 18:39:41 +0200 From: Felix Palmen To: ports@FreeBSD.org Subject: Unprivileged default user for "tiny" daemons? Message-ID: X-Face: /1K@t"h.}e~pR@]c7HorQ!T`F^RJCa'BCr#e>IKA{>C/9OTGB4|xh"y2{?1Z5M i2w"AH^pN_LlHR^{+f',_Np~;.B;!M/bL}*qk]p5*r7F5vW};{:@4u5S?T&f0$7BJ-71Q5SV]:v$`5 A0[DZ:=?S52x8HJ~5@^P_\T@MsjG{R( Organization: FreeBSD.org List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="lcpxynlcudq64jew" Content-Disposition: inline User-Agent: NeoMutt/20230407 X-ThisMailContainsUnwantedMimeParts: N --lcpxynlcudq64jew Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi all, TL;DR: Is there a recommendation for a generic unprivileged default user to use with tiny daemons that won't need any file permissions? I stumbled over that question when adding security/tlsc, a port of my own very tiny daemon that does a simple little thing, without accessing any files (except for its own pidfile). Of course, the best thing to do is to add a service account to UIDs, but looking at it, I found this comment: # Please pick an empty slot when available and also consider base values fr= om # /usr/src/etc/master.passwd This made me think: When would it be appropriate *not* to allocate a dedicated UID? I'd personally answer that with "when your daemon doesn't need to access any files". And I see how it makes sense, because the space available for service accounts is limited to UIDs < 1000. So I started to explore the tree a bit with 'git grep'. It seems almost 40 ports use 'nobody' as their default user. So I did the same. Also discussing this briefly on IRC, there was the suggestion 'daemon' would be a better fit. I can't find a single port using that. Does anything in base use it, is it still recommended? Furthermore, the concern was expressed that 'nobody' is used by NFS e.g. as the fake owner of files owned by root, with the intention that nobody should be able to access these. So, a daemon running as 'nobody' might accidentally get access to lots of files on mounted NFS shares? I tend to think now that 'daemon' should really be the way to go when you don't need a dedicated account. Am I overlooking something? Any other comments? Cheers, Felix --=20 Felix Palmen {private} felix@palmen-it.de -- ports committer (mentee) -- {web} http://palmen-it.de {pgp public key} http://palmen-it.de/pub.txt {pgp fingerprint} 6936 13D5 5BBF 4837 B212 3ACC 54AD E006 9879 F231 --lcpxynlcudq64jew Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iNUEABYKAH0WIQRpNhPVW79IN7ISOsxUreAGmHnyMQUCZFklx18UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0Njkz NjEzRDU1QkJGNDgzN0IyMTIzQUNDNTRBREUwMDY5ODc5RjIzMQAKCRBUreAGmHny MYtCAP970E7OutNfiFAWOlFVBUQE10rl641M7f/RX9ZxsDm1ZAD+KJnATi8cuKov 1MzfUxU21GjWrzhRWofAEzLuAjhi8wE= =GNsn -----END PGP SIGNATURE----- --lcpxynlcudq64jew-- From nobody Tue May 9 08:05:15 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QFrLQ1sPTz49smH for ; Tue, 9 May 2023 08:05:18 +0000 (UTC) (envelope-from zirias@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QFrLQ1Gg4z4016 for ; Tue, 9 May 2023 08:05:18 +0000 (UTC) (envelope-from zirias@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683619518; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=D7srYH1OCFVCe3J5SHdpylXVO/KyzlOUWYFpPz8Nq30=; b=Hg0AKXoLYpx2NRH04Esg3UGZ4Iau25sV7aQWj40esbI1LdmSOa1lVfniHURHU1ffxjqU8P xbc5h6u6AxaMGKv6M3xBsnd1NzitKCcAmy9qv1TJ62jUj2eXBRDc38LlHAko/dMUcQP31M jDO2CNLwFBKr+3QznqRIP6T1tfUc69Z3qU/FIT6sslJKlhbrKLeQ2nzHnRg3+P5a0GRTq6 wHdMDZwu/3XpxK8u87C6qAqo3nbPxYxw0l9pHl8hHgLJUnZCTfru066P8Y+k0k6yuGT09G VRW/9GODkos5Q2mMUPuHdnygCD8Mse6YM5L8pVhQ3Zpg61Xtqyp9px+XAJeU0w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683619518; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references:dkim-signature; bh=D7srYH1OCFVCe3J5SHdpylXVO/KyzlOUWYFpPz8Nq30=; b=PGzyqC1qIK8HcNrXn+z5KNpTHpkTy8wveEJnCyNtZp6BuRTm1tWqaIqDtxJDmtKYb8ia5U EUnqezBK9SrmFHX3/AMyoYwNgT79wfPuPhN1vK/kzWOIaUn+/YsEjviW8uSnLil44DWM5K pEMNfCrhE82Ri4la7TS2a5vrw4+WQ62SDs7cas7Oujwx6NRg2TFhaH7QFZPhJRe0ZVdMk/ ySZ/4yviXUJxw6KAh5E2DdmwL5ctfnXJt3YoNDG/NEm+MnLltwqsMJ04MT8lexfEmMkQ34 e9JWx0dUV6eXb6hK3o7mJrB8kfuGpl/IYnP5tWGNq2TFv0o4ZwqJC9xoqiXceQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683619518; a=rsa-sha256; cv=none; b=cDcy7Opfk7Rb5DTiMQGMo3GjpIjCuSQp73GUI8vhN8giIldjh8hNb2cFJTBbuiFxxyR1se gdZYcxB/r4vey96F9yPxBVKMS3b8K5IENzReE3+q1GBgTU2iGp6IiY9jmh31OOQd50LWme puDZESBzIDl6OIjQQ4XEdVNY+StJ8k9X/0KUom+VZfFf3oaibSgmwwLmJ3LXcDgNZWzHdQ MF3f7zOeQBMMDAUd44i6i+7exVAniYSVqPYMKi89+L8kXqrDjQPLU2a0RBsn9CQElMhGcO n16lrr40CFko/Ip0WEu3i9i8o3Ry1b/UMQjDtfMO7LZ9jOkO9ak0hny6GqF4Jg== Received: from stef.palmen-it.de (stef.palmen-it.de [IPv6:2001:470:1f0b:bbb:1::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: zirias/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4QFrLQ0Dzzz1Cj4 for ; Tue, 9 May 2023 08:05:18 +0000 (UTC) (envelope-from zirias@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=palmen-it.de; s=20200414; h=In-Reply-To:Content-Type:MIME-Version: References:Message-ID:Subject:To:From:Date:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=D7srYH1OCFVCe3J5SHdpylXVO/KyzlOUWYFpPz8Nq30=; b=So6xSzFZGInGVE9TJ1Mh31KWpm cxrnaeQzbgKD3/m8Wcug5nObqbzYHDKka4avxh78lDugZ7uvnthzxZy9+Dm8l9T0rD78s2F3fvfBe 1vJsXSad7+sS1ftmMd9dK/j5JhnCS0H64W0JEA1fH5KYHRAFK12Yje82c/fP8061WImUgvqvsr4OP A4efw8dHglCXz8jzQyP4JyMR7q9uI3js8rHpGAE1nBszanuwyIPkYafJ/VI4WbCl/0IYP+os6jBd/ VoZ5PW4Ud6heilJk96kaeutOt9Z9YlkEuKCfZSHl9N0e8Z+tvmW0ao40pIAgUa8/i7YkNJznJ1ekU TbzxxFVA==; Received: from [192.168.71.101] (helo=mail.home.palmen-it.de) by stef.palmen-it.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1pwILT-000lTx-QC for ports@freebsd.org; Tue, 09 May 2023 10:05:15 +0200 Received: from nexus.home.palmen-it.de ([192.168.99.2]) by mail.home.palmen-it.de with esmtpsa (TLS1.3) tls TLS_CHACHA20_POLY1305_SHA256 (Exim 4.95 (FreeBSD)) (envelope-from ) id 1pwILT-000EOb-Fk for ports@freebsd.org; Tue, 09 May 2023 08:05:15 +0000 Date: Tue, 9 May 2023 10:05:15 +0200 From: Felix Palmen To: ports@freebsd.org Subject: Re: Unprivileged default user for "tiny" daemons? Message-ID: X-Face: /1K@t"h.}e~pR@]c7HorQ!T`F^RJCa'BCr#e>IKA{>C/9OTGB4|xh"y2{?1Z5M i2w"AH^pN_LlHR^{+f',_Np~;.B;!M/bL}*qk]p5*r7F5vW};{:@4u5S?T&f0$7BJ-71Q5SV]:v$`5 A0[DZ:=?S52x8HJ~5@^P_\T@MsjG{R( Organization: FreeBSD.org References: List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="2wxr5cu6f77lgcic" Content-Disposition: inline In-Reply-To: User-Agent: NeoMutt/20230407 X-ThisMailContainsUnwantedMimeParts: N --2wxr5cu6f77lgcic Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Felix Palmen [20230508 18:39]: > I tend to think now that 'daemon' should really be the way to go when > you don't need a dedicated account. Am I overlooking something? Any > other comments? Seems I overlooked something indeed: #v+ $ find [14-jail] \( -user daemon -or -group daemon \) [14-jail]/usr/sbin/lpc [14-jail]/usr/bin/lprm [14-jail]/usr/bin/lpr [14-jail]/usr/bin/lpq [14-jail]/var/rwho [14-jail]/var/spool/mqueue [14-jail]/var/spool/lpd [14-jail]/var/spool/output [14-jail]/var/spool/output/lpd [14-jail]/var/spool/opielocks [14-jail]/var/at/jobs [14-jail]/var/at/spool [14-jail]/var/msgs #v- So, daemon owns e.g. the print spool... Interestingly, ou even find something owned by nobody in base: #v+ -rw-r--r-- 1 nobody wheel 0 Jul 8 2021 /var/db/locate.database #v- So, takeaway is: There is no safe choice other than allocating a dedicated UID for every single daemon, even if it doesn't need to own/access any files? Is this really correct? Cheers, Felix --=20 Felix Palmen {private} felix@palmen-it.de -- ports committer (mentee) -- {web} http://palmen-it.de {pgp public key} http://palmen-it.de/pub.txt {pgp fingerprint} 6936 13D5 5BBF 4837 B212 3ACC 54AD E006 9879 F231 --2wxr5cu6f77lgcic Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iNUEABYKAH0WIQRpNhPVW79IN7ISOsxUreAGmHnyMQUCZFn+sl8UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0Njkz NjEzRDU1QkJGNDgzN0IyMTIzQUNDNTRBREUwMDY5ODc5RjIzMQAKCRBUreAGmHny MSYXAQDiQk4QgV113629nco0L+ayXGFXvM2A2h2Aga1vhfuxUAEAs0qi+TVjzjJ/ uDeF6GtDs9ZH6eMtUM8Hp70fY8qRLwI= =LubY -----END PGP SIGNATURE----- --2wxr5cu6f77lgcic-- From nobody Tue May 9 08:11:04 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QFrTC1JtHz49scQ for ; Tue, 9 May 2023 08:11:11 +0000 (UTC) (envelope-from brooks@spindle.one-eyed-alien.net) Received: from spindle.one-eyed-alien.net (spindle.one-eyed-alien.net [199.48.129.229]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4QFrTB6BKGz40sN; Tue, 9 May 2023 08:11:10 +0000 (UTC) (envelope-from brooks@spindle.one-eyed-alien.net) Authentication-Results: mx1.freebsd.org; none Received: by spindle.one-eyed-alien.net (Postfix, from userid 3001) id A28AD3C0199; Tue, 9 May 2023 08:11:04 +0000 (UTC) Date: Tue, 9 May 2023 08:11:04 +0000 From: Brooks Davis To: Felix Palmen Cc: ports@freebsd.org Subject: Re: Unprivileged default user for "tiny" daemons? Message-ID: References: List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: X-Rspamd-Queue-Id: 4QFrTB6BKGz40sN X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:36236, ipnet:199.48.128.0/22, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N On Tue, May 09, 2023 at 10:05:15AM +0200, Felix Palmen wrote: > * Felix Palmen [20230508 18:39]: > > I tend to think now that 'daemon' should really be the way to go when > > you don't need a dedicated account. Am I overlooking something? Any > > other comments? >=20 > Seems I overlooked something indeed: >=20 > #v+ > $ find [14-jail] \( -user daemon -or -group daemon \) > [14-jail]/usr/sbin/lpc > [14-jail]/usr/bin/lprm > [14-jail]/usr/bin/lpr > [14-jail]/usr/bin/lpq > [14-jail]/var/rwho > [14-jail]/var/spool/mqueue > [14-jail]/var/spool/lpd > [14-jail]/var/spool/output > [14-jail]/var/spool/output/lpd > [14-jail]/var/spool/opielocks > [14-jail]/var/at/jobs > [14-jail]/var/at/spool > [14-jail]/var/msgs > #v- >=20 > So, daemon owns e.g. the print spool... >=20 > Interestingly, ou even find something owned by nobody in base: >=20 > #v+ > -rw-r--r-- 1 nobody wheel 0 Jul 8 2021 /var/db/locate.database > #v- This seems like a bug. >=20 > So, takeaway is: There is no safe choice other than allocating a > dedicated UID for every single daemon, even if it doesn't need to > own/access any files? Is this really correct? This is clearly the right choice even it's a bit of a pain. -- Brooks >=20 > Cheers, Felix >=20 > --=20 > Felix Palmen {private} felix@palmen-it.de > -- ports committer (mentee) -- {web} http://palmen-it.de > {pgp public key} http://palmen-it.de/pub.txt > {pgp fingerprint} 6936 13D5 5BBF 4837 B212 3ACC 54AD E006 9879 F231 From nobody Tue May 9 08:19:39 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QFrg31TcWz49tQR for ; Tue, 9 May 2023 08:19:43 +0000 (UTC) (envelope-from yuri@aetern.org) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4QFrg25ySYz41ZW; Tue, 9 May 2023 08:19:42 +0000 (UTC) (envelope-from yuri@aetern.org) Authentication-Results: mx1.freebsd.org; none Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id 515795C014D; Tue, 9 May 2023 04:19:42 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute5.internal (MEProxy); Tue, 09 May 2023 04:19:42 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aetern.org; h=cc :cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:sender:subject:subject:to:to; s=fm3; t= 1683620382; x=1683706782; bh=T66M4X7/VSumr/Kg9hghI2kgpMl+9EWt3FH Ui77Sf0k=; b=aAZbMiScGm+7Gk+pFagIhnlI3iDfP6h7oAFVD4DmdnPMwAnX8pk IzB/MxeUePBKb5/uCGz63Z0LnvZylC+7Y02BDbZIDioMiJkspCmYAxwcbLgHhCjq pbkzMCDR0+NkOtKEZvr5xYeaxwDB4QoDrwM1BSFqTmhay/F7R2agDqu83XeysUu+ aI7vpt+grRVlEFjDToAmFuWTBMqGVTIvx5LfddfwaeAUocwveVoLNzlqVkjDxeIE 3hcnapx+qVIPb5tA45Cc1R15nIIT9yw9TFDZ7KuDPuH2Msmj4zEF6YBXINvM94Ac FbjqnycD77dQd0tOp1Vr5hNJPdYLAEqLv5A== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:sender:subject:subject:to:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1683620382; x=1683706782; bh=T66M4X7/VSumr/Kg9hghI2kgpMl+9EWt3FH Ui77Sf0k=; b=iClU2LqHSfbQWiYGaJyZDkp5r8qJDQ4KRslvldujA+RnC4p5WVM MjG9gpC56qnymCGYPIWACPp0Zp8b5yj//+iFFb2ZVMj+WI0EQKxXP1maoUVAt0yS T1Hv5bgxKC0OWBHgmHNXF6+NJbJR2XbdUkZ2uWKX+2UP6AwYqoS0btl9zYdUpuBK IxkVpWv8ejskj0T7vFJAEsdRW1+rM+fISnjmvJD++42r9jiydE1lUvUZnvOW2KDQ TeSsdTIxnU5jYJMgwwvL4g6sUgelvQyj9GfHmtdIyDJCUPUH3KIQRF1/NavKGdF0 KcAAGPLxRyzLEDEDGhmop3OTDkFaSn7E/kQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfeegtddgtddvucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepkfffgggfuffvvehfhfgjtgfgsehtkeertddtfeejnecuhfhrohhmpegjuhhr ihcuoeihuhhrihesrggvthgvrhhnrdhorhhgqeenucggtffrrghtthgvrhhnpeeggfeuud egleetgfdvleffgeeutdfgudffudetteegffetleeiiedttdejleffkeenucevlhhushht vghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpeihuhhrihesrggvthgvrh hnrdhorhhg X-ME-Proxy: Feedback-ID: i0d79475b:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 9 May 2023 04:19:41 -0400 (EDT) Message-ID: Date: Tue, 9 May 2023 10:19:39 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.10.1 Subject: Re: Unprivileged default user for "tiny" daemons? Content-Language: en-US To: Brooks Davis , Felix Palmen Cc: ports@freebsd.org References: From: Yuri In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 4QFrg25ySYz41ZW X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:19151, ipnet:66.111.4.0/24, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N Brooks Davis wrote: > On Tue, May 09, 2023 at 10:05:15AM +0200, Felix Palmen wrote: >> * Felix Palmen [20230508 18:39]: >>> I tend to think now that 'daemon' should really be the way to go when >>> you don't need a dedicated account. Am I overlooking something? Any >>> other comments? >> >> Seems I overlooked something indeed: >> >> #v+ >> $ find [14-jail] \( -user daemon -or -group daemon \) >> [14-jail]/usr/sbin/lpc >> [14-jail]/usr/bin/lprm >> [14-jail]/usr/bin/lpr >> [14-jail]/usr/bin/lpq >> [14-jail]/var/rwho >> [14-jail]/var/spool/mqueue >> [14-jail]/var/spool/lpd >> [14-jail]/var/spool/output >> [14-jail]/var/spool/output/lpd >> [14-jail]/var/spool/opielocks >> [14-jail]/var/at/jobs >> [14-jail]/var/at/spool >> [14-jail]/var/msgs >> #v- >> >> So, daemon owns e.g. the print spool... >> >> Interestingly, ou even find something owned by nobody in base: >> >> #v+ >> -rw-r--r-- 1 nobody wheel 0 Jul 8 2021 /var/db/locate.database >> #v- > > This seems like a bug. Indeed, it's even in BUGS section in locate(1) :) The locate database is typically built by user “nobody” and the locate.updatedb(8) utility skips directories which are not readable for user “nobody”, group “nobody”, or world. For example, if your HOME directory is not world-readable, none of your files are in the database. >> >> So, takeaway is: There is no safe choice other than allocating a >> dedicated UID for every single daemon, even if it doesn't need to >> own/access any files? Is this really correct? > > This is clearly the right choice even it's a bit of a pain. From nobody Tue May 9 08:26:27 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QFrpt0qjHz49tZk for ; Tue, 9 May 2023 08:26:30 +0000 (UTC) (envelope-from zirias@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QFrpt0LJGz42yW for ; Tue, 9 May 2023 08:26:30 +0000 (UTC) (envelope-from zirias@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683620790; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=RnS2H1Jjj3ws7k/hf/GlIZh/4PSW/dT0qZ/RbkCUrAY=; b=gNsOpXOOZ3jskCC8CDxkKgQP87eyuqXZrkWL2fhwXQv7fqelge9IQhVMZcf+pQYoEYtC5D 94NV0Aw2zCqvBf1XA4lUbC9w2kkW5EAcCLIo1tljtTStCUcwHzb1Hj7sdUvqcAA2eBl0Mn ttr9XL/sCdSQ1ngGvycZTNi+NtSu/8EAKNn555YeFw+U7eUFrOMGmAn2JplPiXuN//Bxho KQfQtwDBWk3kqL0RDOkfwLDKemsq1fmcNEOzH11HCipXQynsP51YsEXPhv05PwWtvSmVuH uJdrQ0+Rto03ndZfYOcubMUAXrxGG9SM7zFfavAIiKBXqJBFaNrPfjPl7kxMGw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683620790; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references:dkim-signature; bh=RnS2H1Jjj3ws7k/hf/GlIZh/4PSW/dT0qZ/RbkCUrAY=; b=Tsz5CR/+boFF6KQ63eXduOMG5IdG4AHyzDpRyY+m8KcqAsRWUW2UtIStXC0i4iMfAQZNWN r2D69o1LaYX7Mv/FFn2uW6LU9c5dRABI+P+D3tOZo6dCXETI1fRYbcqIs8LYIXT3m1hn5c 79f1XezRBOiHwjE8P4CkwQjQjIXy0kzLwMV0EuiNVoBn3L9jIOULbNpGAou7JURHYsuOFa lQeHjG8qxMC69wOpY8moaNrh+rwln6JpB09xXkE0i1F7P1aPyT/4uEFmjjD1oiTDpqlicU pEJ7Kr6CFxlrOIhWgCCq5nb+sjt86ZwfFRZ7WIn6W5qojLrN9Z2HzRQgJ8ao9g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683620790; a=rsa-sha256; cv=none; b=Npu1cb0iuLUtxJVSGgZhTlzW17hYR5njC/ICXMe8kYrneljfisQpdMoGhrvEOWm+BBB8Qn 2XZ7XYrgkNs4yslFuBrVQNbWIPHj5w0HjR9wO1YNIzs9meFwyufhb2EGHhGxUiG5XFP9hH +5jyUVFg9HXrrN4TpQVdKgJ0L4Yhi/aFC+VB3/9rOu/nm5uwSdF1nnnzZWdo3+f3X6ySOH RSsvWmMV67LelXKjM6fJqGZh9Y5aLeCVYy5RnWK5dSlLL9ZrntpcdKlo6ekiMWRL8GYkuy 7trTkpy2h/ZL7M5b5VIv1AaGWmtmGoOQS+cWZkq+d1vBXTQjp8Oy45WciuVTqg== Received: from stef.palmen-it.de (stef.palmen-it.de [IPv6:2001:470:1f0b:bbb:1::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: zirias/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4QFrps6P8Xz1CjK for ; Tue, 9 May 2023 08:26:29 +0000 (UTC) (envelope-from zirias@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=palmen-it.de; s=20200414; h=In-Reply-To:Content-Type:MIME-Version: References:Message-ID:Subject:To:From:Date:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=RnS2H1Jjj3ws7k/hf/GlIZh/4PSW/dT0qZ/RbkCUrAY=; b=U+zygxHjUUFSQnUOeJhqlZQWG/ IDkzzTRDUPNtpBAaa9gXIjJzxyviNkCv0bkpgWpz+o6/FuCm5EVexj/iVNMMU4AkpQLsd7zd3z5Sf usSm5rD8k8JkPrQ3CXugQLcZY9kt3e0zObgqtrO8ecsvq5CrQSkxENHKnVIBL3Y/zR6EQbWByz/Go aXa5DvyMBc7OhBy/tyhwtdPXoFlgoGPGpCg5PFbiPpyxNQ3QMODCfsrtIEklN1c5gf30/xseJrH5U UVLMcaieFGDLDbn+Yu22mxM3vOdnL1msog88S9wWS26S/FP5NtzrnJcKuJoMwRC26n+yTDqNA3hv+ rjWsHK3w==; Received: from [192.168.71.101] (helo=mail.home.palmen-it.de) by stef.palmen-it.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1pwIg0-000lXm-O9 for ports@freebsd.org; Tue, 09 May 2023 10:26:28 +0200 Received: from nexus.home.palmen-it.de ([192.168.99.2]) by mail.home.palmen-it.de with esmtpsa (TLS1.3) tls TLS_CHACHA20_POLY1305_SHA256 (Exim 4.95 (FreeBSD)) (envelope-from ) id 1pwIfz-000Eck-SN for ports@freebsd.org; Tue, 09 May 2023 08:26:27 +0000 Date: Tue, 9 May 2023 10:26:27 +0200 From: Felix Palmen To: ports@freebsd.org Subject: Re: Unprivileged default user for "tiny" daemons? Message-ID: <7pvzx7x54djblto5nvepsbz5c76xhv2j6zssq7s7pvsjmvypde@jxxnzexifuvo> X-Face: /1K@t"h.}e~pR@]c7HorQ!T`F^RJCa'BCr#e>IKA{>C/9OTGB4|xh"y2{?1Z5M i2w"AH^pN_LlHR^{+f',_Np~;.B;!M/bL}*qk]p5*r7F5vW};{:@4u5S?T&f0$7BJ-71Q5SV]:v$`5 A0[DZ:=?S52x8HJ~5@^P_\T@MsjG{R( Organization: FreeBSD.org References: List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="n4lvbrxz4gb26o3a" Content-Disposition: inline In-Reply-To: User-Agent: NeoMutt/20230407 X-ThisMailContainsUnwantedMimeParts: N --n4lvbrxz4gb26o3a Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Brooks Davis [20230509 08:11]: > On Tue, May 09, 2023 at 10:05:15AM +0200, Felix Palmen wrote: > > * Felix Palmen [20230508 18:39]: > > So, takeaway is: There is no safe choice other than allocating a > > dedicated UID for every single daemon, even if it doesn't need to > > own/access any files? Is this really correct? >=20 > This is clearly the right choice even it's a bit of a pain. Thanks for confirming. Well, my concern wasn't the hassle to actually do that, but more the confusion created by the comment on top of UIDs, and also the fact that this seems to be a "waste" of precious "uid space" below 1000 if you don't need any file permissions... But seems there's indeed no immediate solution here :( Cheers, Felix --=20 Felix Palmen {private} felix@palmen-it.de -- ports committer (mentee) -- {web} http://palmen-it.de {pgp public key} http://palmen-it.de/pub.txt {pgp fingerprint} 6936 13D5 5BBF 4837 B212 3ACC 54AD E006 9879 F231 --n4lvbrxz4gb26o3a Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iNUEABYKAH0WIQRpNhPVW79IN7ISOsxUreAGmHnyMQUCZFoDs18UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0Njkz NjEzRDU1QkJGNDgzN0IyMTIzQUNDNTRBREUwMDY5ODc5RjIzMQAKCRBUreAGmHny MZ55AP9FQOp2Xf6tNAwRCPjjUAsyUkum1No7y55mDB/9rSqXiAD/TAXi+GbUcrY4 NSgNNO0j/T41voFrR8MifjjFjboc8wg= =rYj+ -----END PGP SIGNATURE----- --n4lvbrxz4gb26o3a-- From nobody Tue May 9 15:16:38 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QG1w90wckz4BJQ4 for ; Tue, 9 May 2023 15:16:41 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-qk1-x72c.google.com (mail-qk1-x72c.google.com [IPv6:2607:f8b0:4864:20::72c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QG1w86B6sz3p5s for ; Tue, 9 May 2023 15:16:40 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Authentication-Results: mx1.freebsd.org; none Received: by mail-qk1-x72c.google.com with SMTP id af79cd13be357-757742c2e5fso238078285a.1 for ; Tue, 09 May 2023 08:16:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardenedbsd.org; s=google; t=1683645400; x=1686237400; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=zn7pSsOveHoxINbmqyxKh5ZK9YkHIaWO7nea6VpsAJI=; b=PxhFPGehKGwGoSP5qsRKVE5HZzoyURRnZmZgVZ/DaPtOAqVM0UlFBRHBrCGBbGR7Ck 5CAYuISA1a5dgM0JlTZ3y4+K7tE5re8tnsG15DuLVQjPv7VnjZHekSFj7rBvKGpX4TOk qZpz0p1pnt9ysvbcKJJNKN0tCmsKTE/b5hpzXSHwPgpxfp8fxL6TpojmE5SgdCi1ncmJ gjvJQMdGKxh19qydx0UUJO0VXXFLTtNJRj64DxX0IDuvh+lwdgC1P6rW9+8dxwy6VK50 Kr11fIOzr3Q/avUqNfh1YDatvzvq3B+YZ7yw8SoRaQ5GxbjW0Uw9YLms+nXHI2X2kNiP XlGQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1683645400; x=1686237400; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=zn7pSsOveHoxINbmqyxKh5ZK9YkHIaWO7nea6VpsAJI=; b=LkiJ8mYBUrgYj3b0yTleIGTBIbt4fkMzMugYrcWS62O3NxPhBt2Gpkn8nkqhaqwRpl iH23UZ3o8b2OxTf5nykm3SANyAL3xfywtXrpJO34arEnItZHtFf+4ORIK10+o+xOMy17 yBKHJ8D5bzKhLyhoJ+Rigq5eOJT0hvi1OkOYPT916Hw4gQAnnNx5B9BNILgZr9BtmVyk kb2RLJ/zfLESra105Ml61Qgc22NHWsmvSMFqT46y+vSSNXdJeiCy6cDdN6353Q0gOCPs qPa/uI1nd5Hcv9IdQatg5zL5guFKeZiBFPyGcISqv7Ujc1/ngFO7au21kVC/+lw2q1zW b/lg== X-Gm-Message-State: AC+VfDwdYd7s6yHEYFksL3hVwWqzYzsY897oh9mI3zWH83335YmNRD7Z v57z9uY1lCCHGUoA+cxfC4YrJRcGumpwzKvxvS4= X-Google-Smtp-Source: ACHHUZ5C5V8IFMrJN5pAqZULeZTuGNMC00g6geqpL4z3IZP8krtLOKM0Cr6iCKDt5fZdmELiX0b3bQ== X-Received: by 2002:ac8:5b8f:0:b0:3f3:7e3b:d96a with SMTP id a15-20020ac85b8f000000b003f37e3bd96amr19862447qta.56.1683645399766; Tue, 09 May 2023 08:16:39 -0700 (PDT) Received: from mutt-hbsd (pool-100-16-219-215.bltmmd.fios.verizon.net. [100.16.219.215]) by smtp.gmail.com with ESMTPSA id i10-20020a05620a150a00b007579ed46c21sm182506qkk.45.2023.05.09.08.16.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 09 May 2023 08:16:38 -0700 (PDT) Date: Tue, 9 May 2023 11:16:38 -0400 From: Shawn Webb To: Felix Palmen Cc: ports@freebsd.org Subject: Re: Unprivileged default user for "tiny" daemons? Message-ID: <20230509151638.a7oc4os62lilhlkr@mutt-hbsd> X-Operating-System: FreeBSD mutt-hbsd 14.0-CURRENT-HBSD FreeBSD 14.0-CURRENT-HBSD X-PGP-Key: https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/blob/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc References: <7pvzx7x54djblto5nvepsbz5c76xhv2j6zssq7s7pvsjmvypde@jxxnzexifuvo> List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="sh3spq3733dx24sr" Content-Disposition: inline In-Reply-To: <7pvzx7x54djblto5nvepsbz5c76xhv2j6zssq7s7pvsjmvypde@jxxnzexifuvo> X-Rspamd-Queue-Id: 4QG1w86B6sz3p5s X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N --sh3spq3733dx24sr Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, May 09, 2023 at 10:26:27AM +0200, Felix Palmen wrote: > * Brooks Davis [20230509 08:11]: > > On Tue, May 09, 2023 at 10:05:15AM +0200, Felix Palmen wrote: > > > * Felix Palmen [20230508 18:39]: > > > So, takeaway is: There is no safe choice other than allocating a > > > dedicated UID for every single daemon, even if it doesn't need to > > > own/access any files? Is this really correct? > >=20 > > This is clearly the right choice even it's a bit of a pain. >=20 > Thanks for confirming. Well, my concern wasn't the hassle to actually do > that, but more the confusion created by the comment on top of UIDs, and > also the fact that this seems to be a "waste" of precious "uid space" > below 1000 if you don't need any file permissions... Hey Felix, Is there a reason to use a UID below 1000? Why not let `pw` set the UID/GID for you upon creation of the account? But, in reality, having one account per daemon is preferred, regardless of *intentional* use of resources like filesystems, networks, hardware, etc. Having too many "widgets" running under a single UID/GID creates a large attack surface. Let's hypothetically say a system has 30 (thirty) unrelated daemons running as the same UID. An attacker has equal access to all thirty daemons upon compromising a single one. Dedicating a UID/GID to each daemon limits what an attacker can do, not just from a filesystems perspective, but from the perspective of other resources, too. One must rememder that debugging facilities like PTrace and procfs exist and can be (and are) abused for post-exploitation activities. Thanks, --=20 Shawn Webb Cofounder / Security Engineer HardenedBSD https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A= 4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc --sh3spq3733dx24sr Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEA6TL67gupaZ9nzhT/y5nonf44foFAmRaY80ACgkQ/y5nonf4 4fry+xAAjH3rzJq9he+nH+rOltRSPZScBrW+J5B+9noPOMTCPlIcvG+TXuo4k5pZ jQfA360DAACUiFE8ItEV8pibk8aLU+V1egSDpXlgGQ1rnik+5iVyEuoF8eADiVGR /mRkRr0HUQ2Rql0AS6DpgXC1euByl1XeoInHqyPsgJTIMAMHfnDZ6ZL52chRhSTz VnActH2BJEwNyWrNslgAzlOek4xfvxu9zp/8PVPm00HtuMdpFr3Ix75BqX5dEZAw BHo1tpxrk40aSQjEYVwzD29cv+Gi0ECe/8wXJILNpin8miqJG41HoRUP0JA5hP0o 0Ptub3cSzW1Uj9PpXZ0pdHIkr2LuaLD9MF0X6lsArZkVUEP7fW6TS3ou6fLjlgNa t+TIEG1snsqlzJ8uy1YpJTu46OEmk5xHm2YvYyj/8TaGM4Gwzu1j0EArCDEapYFa U4qKSV3QzIuCVh4WCuzBVrFqJALUpgmqfvvgk4UDcyTlCB235mT4aZqhdi84iEGi Jf3fKsoRPcZ5hXYOvWUZzyswH45fj9+XVI22xCrCzVenasK4VrxBIaJVHUGGSNEI /ICZUtMhlJ1VROUox6nH9iRVeWKQ/7fnsHcKo2/XnZ/NhutJ3vdwTvsQgqbW9qYb J+5tmdLxgyd3NFeP8v8HoUNq9gH8ETqUM2fkKZAg1ZxN2rL0cC8= =DBmC -----END PGP SIGNATURE----- --sh3spq3733dx24sr-- From nobody Tue May 9 15:28:20 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QG29h1l6Zz4BKBS for ; Tue, 9 May 2023 15:28:24 +0000 (UTC) (envelope-from zirias@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QG29h1G4Mz3qYP for ; Tue, 9 May 2023 15:28:24 +0000 (UTC) (envelope-from zirias@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683646104; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=qUsViWvtX55qPy8WPeC0/CTquecHeNjsGDEU5y/8hVs=; b=kU4RBfWeX5XANruu/2ZTkKNXGmxFsBFe21r1zwDAziZIDNhaaMk+EMqstlmwIAtcCSDRxr mang3zUpWbm3enP4HKuFg+BxOmFEXq5lxD+AjnCi/wC3CINJJH2FA85hcAZ3Typtr2r8Mi YnH6IFnAVPK6hravnSq16iJNyPNYmcPEQPGzoK9dgYDMIoZD+3rSjqDNdqfSLlMT2NF0g9 7KFADxMBu166WF6PFeAtgNamfF9b3+gCF6kmGdkGcMig4H/O/dPdXOSO2WJtTzZQC5nCC7 y5dVI/o3qXnKFqjp4KjZKrkOOowq3ye2M7SpqM+TniG+YMAN4EgFVf0U6FQ7Nw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683646104; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references:dkim-signature; bh=qUsViWvtX55qPy8WPeC0/CTquecHeNjsGDEU5y/8hVs=; b=HyoL/vjxnyi/PQHa0cmoK4F8YyYxewOjiLGtis+BfS3SBhH/tif9KgtoSeSiwyaYDXOd2Y goDwsC8ZlsDR292tOWu3fxcgo9y1yneI4wEfbk3ucAW8C5LAQ+FCS3OoQayb3RlEcuIaBc ZYBgkTPNp1/vUATrd+gvniNjG+KU5nFlkt7ka4qJY3SzYKC62HRqH+Ug20SdBXaBal7M+K Hk/h9PaadUSuDHk67c++llip/VodL9vZ4d651cPnuievc/wDWPUAM7Bz4PSrWAHkoW6o9G pGBxhXh2l3DaFVGS/BacmEfknAmjI4lEzFudClv36L5YtBaWc/pNClsbP+6l4w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683646104; a=rsa-sha256; cv=none; b=WMxQaDFGo+VzPbkdPeE+kzZRWRSAjjPQ3OV4uhf5P3GXIb3eVFb8KhBss5WyhLemQnuMMr oyhewQjZIOcyOV8ADR/Giq7eP3kTH8qJhAY+g5f62NTypbBZSBCFE7O8N3S14Ss/ZSXs6P wQOkFxR/9OyjpYnKHN3PP5oabg5jL5cSjro9ziP0r0fb+Q/cV9chXlIbdG+9sRIu6Fgsni R8DF9WCXifac0M32OXNbnrL2eA+XibxbR7Zsqx3b/YOkwpPC90+5Qxuem+cyXkKwdHXiS2 yjVxLm+vbphPHN/HkynMKWHsJAWBgL74Z90cQsMSQtiDvJNBIIjYnpp/w28FOw== Received: from stef.palmen-it.de (stef.palmen-it.de [IPv6:2001:470:1f0b:bbb:1::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: zirias/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4QG29h0CgwzMfp for ; Tue, 9 May 2023 15:28:24 +0000 (UTC) (envelope-from zirias@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=palmen-it.de; s=20200414; h=In-Reply-To:Content-Type:MIME-Version: References:Message-ID:Subject:To:From:Date:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=qUsViWvtX55qPy8WPeC0/CTquecHeNjsGDEU5y/8hVs=; b=weXhJzgBm1kHqImypr4k5Tvxqp 8EpqGjZQl82/TlpdKDdPfeS56B+XUjbI1cS/10xe3YoIzP/jHqRG2S+QY9wRxDUFhc+co7Ewlayjg uRToerz/mtAX659M1cbmkTkQQZabdaxO93DBLXV2CtO7KPxoeDJdJNf2aa2Fga1GWrBwTEm95nhUl MJmeUnIzW9QakfrVZBai8nVju8jl4egBfASNtLXrKCyidl7q1Ih1wIdJzVdijTla0zs3D/oyEDGae qr6rxS27MbnKERhvk/kAVefnK/wecBRyEcWcFWvIpHc8YuErcLGvlqJV1zihFJy1ZE+n43PemAmPF adkwSgzQ==; Received: from [192.168.71.101] (helo=mail.home.palmen-it.de) by stef.palmen-it.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1pwPGI-000ncb-OO for ports@freebsd.org; Tue, 09 May 2023 17:28:22 +0200 Received: from nexus.home.palmen-it.de ([192.168.99.2]) by mail.home.palmen-it.de with esmtpsa (TLS1.3) tls TLS_CHACHA20_POLY1305_SHA256 (Exim 4.95 (FreeBSD)) (envelope-from ) id 1pwPGH-0003rP-Qp for ports@freebsd.org; Tue, 09 May 2023 15:28:21 +0000 Date: Tue, 9 May 2023 17:28:20 +0200 From: Felix Palmen To: ports@freebsd.org Subject: Re: Unprivileged default user for "tiny" daemons? Message-ID: <5p75fgvxjde4tm3tc2ui5jrhnc6ffxvijgfedcjvaklb3musjm@gwrgr6h7yr5n> Mail-Followup-To: ports@freebsd.org X-Face: /1K@t"h.}e~pR@]c7HorQ!T`F^RJCa'BCr#e>IKA{>C/9OTGB4|xh"y2{?1Z5M i2w"AH^pN_LlHR^{+f',_Np~;.B;!M/bL}*qk]p5*r7F5vW};{:@4u5S?T&f0$7BJ-71Q5SV]:v$`5 A0[DZ:=?S52x8HJ~5@^P_\T@MsjG{R( Organization: FreeBSD.org References: <7pvzx7x54djblto5nvepsbz5c76xhv2j6zssq7s7pvsjmvypde@jxxnzexifuvo> <20230509151638.a7oc4os62lilhlkr@mutt-hbsd> List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ejlkleorpryrjjgf" Content-Disposition: inline In-Reply-To: <20230509151638.a7oc4os62lilhlkr@mutt-hbsd> User-Agent: NeoMutt/20230407 X-ThisMailContainsUnwantedMimeParts: N --ejlkleorpryrjjgf Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Shawn Webb [20230509 11:16]: > Is there a reason to use a UID below 1000? Why not let `pw` set the > UID/GID for you upon creation of the account? That's what's traditionally reserved for system/service UIDs. And FreeBSD ports use a fixed mapping (see the files UIDs and GIDs in the root of the ports tree), which is nice and simple and effectively prevents accidental UID reuse when uninstalling one service and installing a different one ... > Dedicating a UID/GID to each daemon limits what an attacker can do, > not just from a filesystems perspective, but from the perspective of > other resources, too. One must rememder that debugging facilities like > PTrace and procfs exist and can be (and are) abused for > post-exploitation activities. That's actually a very good point I didn't consider, thanks for the hint! For my own port, I already shaped a commit moving it to a dedicated UID by default, will push it soon. For all the others using 'nobody' right now, we should probably do a cleanup. Cheers, Felix --=20 Felix Palmen {private} felix@palmen-it.de -- ports committer (mentee) -- {web} http://palmen-it.de {pgp public key} http://palmen-it.de/pub.txt {pgp fingerprint} 6936 13D5 5BBF 4837 B212 3ACC 54AD E006 9879 F231 --ejlkleorpryrjjgf Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iNUEABYKAH0WIQRpNhPVW79IN7ISOsxUreAGmHnyMQUCZFpmgV8UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0Njkz NjEzRDU1QkJGNDgzN0IyMTIzQUNDNTRBREUwMDY5ODc5RjIzMQAKCRBUreAGmHny MeDnAQCWr3t/TJDYkBQG7ybt8Ji9B8PFZYRC0IIusubS/eI4ogEA14MwBY4HUMSL GNLZf3vizSNr9TSn41L4oiumgxJMvQw= =h4EJ -----END PGP SIGNATURE----- --ejlkleorpryrjjgf-- From nobody Tue May 9 16:08:05 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QG33T6TgPz4BMKD for ; Tue, 9 May 2023 16:08:05 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QG33T4ZRbz3yjW for ; Tue, 9 May 2023 16:08:05 +0000 (UTC) (envelope-from portscout@FreeBSD.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683648485; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=bIc70Oex1dJkx0z4r+t0/dG34htNX1FANuDk5bAxbqg=; b=LVGPnvB0Jq263SsYZ2zDn+Bm8ylOCgE9pTdQLJfBMq0hukeJKeiV3Bk/aZ+6hd5t9wOO/3 0A+44NewD3tCMx8lvU92yu7UiTClAEXxQWTL3E2shIYECzFeg/RJ6RjPsZ/MlLvOJJ18SD t5ovtyQ9ruZNlp7UcIwgQs2KTrURZhiFD6pV/AB+YQZqfdtOAHAALrCagqepYdjmRWkdSI e8eJeSNZIfjfwzG9RyEa5nUv8hnQCO7uhIqKCr3v9gJyirbtU1beK5qHgWa0jy0ex+YlFI Dj2HO1BqYW0ldDfWHIxJeMSszJhU7mKLTpKeDlWwQqWapjJ+brZichRMi0p8Wg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683648485; a=rsa-sha256; cv=none; b=tR5FAIjP7NihfruHq4bLYguVo/NNQa1sqH1dP/REcznL2uTFxzQPEhQMPJCNqCQ4LfD8ED OAT8V2ZcLTGuyL0+qSAcxmJz0apWh7Ck7+qoF0Ak8wiw/vLL8cot9DjGonPH7/IUXDphLR xtfdpYs/G0/HniazBJid0H3L2/vo8BGINW4NJLFgsUZ7dIsmGrVSjvQHByqJYxxsh6AKen IXDmmiugk7gdBwV/bGPpR3z7GmaCKcB1VP1oFfrJy7WnZPIaPogQwVe1O3ptAOsGZV6cCQ 17DaDFDVBSlp6bAYTlJE/WBfXaahlObxbhRQbQp/FiKFS/g3T8Cqvkt42FP9Ew== Received: from portscout.nyi.freebsd.org (portscout.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QG33T3ZGxzZP5 for ; Tue, 9 May 2023 16:08:05 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from portscout.nyi.freebsd.org ([127.0.1.10]) by portscout.nyi.freebsd.org (8.15.2/8.15.2) with ESMTP id 349G85us069498 for ; Tue, 9 May 2023 16:08:05 GMT (envelope-from portscout@FreeBSD.org) Received: (from portscout@localhost) by portscout.nyi.freebsd.org (8.15.2/8.15.2/Submit) id 349G85VS069497; Tue, 9 May 2023 16:08:05 GMT (envelope-from portscout@FreeBSD.org) Message-Id: <202305091608.349G85VS069497@portscout.nyi.freebsd.org> X-Authentication-Warning: portscout.nyi.freebsd.org: portscout set sender to portscout@FreeBSD.org using -f Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Date: Tue, 9 May 2023 16:08:05 +0000 From: portscout@FreeBSD.org To: ports@freebsd.org Subject: Unmaintained FreeBSD ports which are out of date X-Mailer: portscout/0.8.1 X-ThisMailContainsUnwantedMimeParts: N Dear port maintainers, The portscout new distfile checker has detected that one or more unmaintained ports appears to be out of date. Please take the opportunity to check each of the ports listed below, and if possible and appropriate, submit/commit an update. Please consider also adopting this port. If any ports have already been updated, you can safely ignore the entry. An e-mail will not be sent again for any of the port/version combinations below. Full details can be found at the following URL: http://portscout.freebsd.org/ports@freebsd.org.html Port | Current version | New version ------------------------------------------------+-----------------+------------ cad/ifcopenshell | 0.6.0 | blenderbim-230508 ------------------------------------------------+-----------------+------------ devel/protobuf-java | 3.22.2 | 3.23.0 ------------------------------------------------+-----------------+------------ net-mgmt/netxms | 3.2.472 | 4.3.6 ------------------------------------------------+-----------------+------------ If any of the above results are invalid, please check the following page for details on how to improve portscout's detection and selection of distfiles on a per-port basis: http://portscout.freebsd.org/info/portscout-portconfig.txt Reported by: portscout! From nobody Tue May 9 21:12:38 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QG9qG0Vghz49WNY for ; Tue, 9 May 2023 21:12:58 +0000 (UTC) (envelope-from tatsuki_makino@hotmail.com) Received: from APC01-SG2-obe.outbound.protection.outlook.com (mail-sgaapc01olkn2042.outbound.protection.outlook.com [40.92.53.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QG9qF4209z3Jnj; Tue, 9 May 2023 21:12:57 +0000 (UTC) (envelope-from tatsuki_makino@hotmail.com) Authentication-Results: mx1.freebsd.org; none ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LHBrTVnUoKgBNcA7w0KeQoaiNsVhAl0fhmQD2HNykijL2nlnXM0GS7K8C7IppU+yhw4TTx4TRBspbyaO3j5mWygsBMFq+L7U9/h2PeYyuUwP85xDeE7i0Yy8ReNO/MLXCagWPZVx5+znSUoDEQjalIcfa+e14cZu8Z/mSfnVELUaHiOUQwGPA4WxqANZjLAJ1JzguAB8cPgnrQk3WxLT11Gvako4PFQXYaBjdhjanpiOYsD5FEsqrj7STAZGRLzHmLQ10wP410NkEkMXttyHKcvhXgMOcy2Zintjan4QK2CPP6AvICxUy54Ehun1pldkOeZxLNtuyTPeMElpTr9BJA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=MCKkajrP3XF4biLHttftojdsFnpxHxXOsfnRtQoeDow=; b=fYnF7b+3OJSrPZtCDG6bCRd6EuPnnjBgsmBjQ+ENKahzXchki8L4D6ch9LiUBKQf8dHwEUO/u5LZphB7kIIctZ9QEcO2NCdYjO8lEjUh/90No3j+NzFG/Ry06gaLhllj+iFocYVZdaYgGdDVj+JR8RduYO3cHgh3YgBWGgnKMpOywwZz/jWtQvteUwjW6vD9qqJWF6QnAKl1vUprtp4VNMsQz+HpAApMcdtj7a60w+h1uMX51RuUBFHILKWrnj3dQ4kVwdg7Qj+I8QOQGnDBurWnCfOJT5P4UcXX+DlPDNdhcXKLJvhBaRW2GzvlgiBfisvPydFpDYXNh6U0RkYnrQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MCKkajrP3XF4biLHttftojdsFnpxHxXOsfnRtQoeDow=; b=EDkPHDOLrJqYsWnRM/DTMpNgD3wZUpWu0Lr9QIi7KRzqOMk8u8/tGpTXHjrNAnUdqE8XYQqoltVTlGbTnoWsP6xkzQZaS3KxZ11rcj50VSLQPC6dXCFKEPam1RXWQ3L2dv1sUf9vxJnM/tFDbNg+uzhLKN2pLndzwnv3mKMRpqSoJRBge5YGGAYwcUpoZH1yH0O7Vr1/OYRMTG8JI49GJMZhyaFon6pgvfC3NkBtAh8YTjTmS/ZFkmAZ/Krnec5EPuE5pcdTyZNhMai7mz5bYZWxjHlbOt5/jXponXE3rRH3saUJEo50+40adBl3GLeKw0EaaUCOqcu7bGqMeBB51A== Received: from PSAPR03MB5639.apcprd03.prod.outlook.com (2603:1096:301:66::13) by SI2PR03MB5547.apcprd03.prod.outlook.com (2603:1096:4:132::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6363.33; Tue, 9 May 2023 21:12:52 +0000 Received: from PSAPR03MB5639.apcprd03.prod.outlook.com ([fe80::5519:737a:788f:81f8]) by PSAPR03MB5639.apcprd03.prod.outlook.com ([fe80::5519:737a:788f:81f8%5]) with mapi id 15.20.6387.018; Tue, 9 May 2023 21:12:52 +0000 Subject: Re: Unprivileged default user for "tiny" daemons? Cc: Yuri , Brooks Davis , Felix Palmen References: To: ports@freebsd.org From: Tatsuki Makino Message-ID: Date: Wed, 10 May 2023 06:12:38 +0900 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.4 In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-TMN: [+Ksm2tEKF62dRYaz1VYOIOAAYX2yaIo0] X-ClientProxiedBy: SI2PR01CA0016.apcprd01.prod.exchangelabs.com (2603:1096:4:191::20) To PSAPR03MB5639.apcprd03.prod.outlook.com (2603:1096:301:66::13) X-Microsoft-Original-Message-ID: List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PSAPR03MB5639:EE_|SI2PR03MB5547:EE_ X-MS-Office365-Filtering-Correlation-Id: 87b3b11a-52af-43c1-8117-08db50d22619 X-MS-Exchange-SLBlob-MailProps: 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 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?eHRtN1FZWUhPd1BpUXpPODM5SzJZTDdRbTE4bmd2UFJSYmRMb1dyT1NhMGEv?= =?utf-8?B?YXZyM3BhaFZvS1h6UEJHSXoxOGNzSDVjOVJxSzFuZjh5T1ZaNmVoSGtjcUdB?= =?utf-8?B?amljSXgvcmhzS1N0emJPdzRsSGozWlhkaGwvVHJ6cmR4T215S0JURmZpWkFq?= =?utf-8?B?c0xrR1I5Y003Zm1XYVRMRXlvbkE0MStLSVMxZXhiK3BYd2gwNWZ4blcyUU44?= =?utf-8?B?ckxHWi8zcFdXblhtaGlleGJheVNpMFhuTVZubW93cVVPM2hzRXhLYVBMcHlS?= =?utf-8?B?emQvTDdwUHNGTjlTZzNaaEppZVJ3NUFVdHpNdU0zQ2NOOE9DK3ZZTGxta0JI?= =?utf-8?B?MWtvY3A3VytXbS9wdXFOQkx3ekFkVnZsTHg4eWFUL0RzR3dQOXo4TTVtV1c0?= =?utf-8?B?WVZJV1dSanNwYVh1d3VwejY1clFXQzNlbnV2Nm1NQkFOOVpGaDc1aW95eWFm?= =?utf-8?B?YzdtdWoxRVo5TWFyTFB5MitYUzRleGZrWHpYemJ0UWpmOVgwOWF4NVFKK2Nn?= =?utf-8?B?YnZTeFNVUDRzZ2J0WlN6cmthQkg1bUo2Q24vTEI3OGVXYkVTYkZsVyt4WjVh?= =?utf-8?B?bTU0ZFVtWGlMekVXaHRlbHVlRHRqeWtVUWZFblRLTTFFaHBrK3JLN2RhS3FX?= =?utf-8?B?YkJFcDFNZUlhamVGRmNiNnprSUd1ZWw4REhlQ2M5US9Bcjh2ZUR0cFRVajlv?= =?utf-8?B?MzhPU1hBVDM4RmRTemticlZiRmdaV2N3ZjZ2dUtnR2tGL2FYdThsUmJFVXhw?= =?utf-8?B?MUpHZ2tTTFZPZU1Fc1l0Q3FtajFrYVNnZC84VGdrYnE5ai80TVAxazNkQUtW?= =?utf-8?B?STRmWENxK3pCRXFiY1hFTnQva05OSzhmMDZFbVNSQWxCZDV2bDE2MmZTRHQ0?= =?utf-8?B?dWpXRzM0QXVNNGNVWlRTc1JkS0NtaG16SWpucGtCeUNhekxyM0xTUThqekls?= =?utf-8?B?SnRUdndpeHRXeUdOVmZDT01RNXRYY1YyVklmY2Fyb2RyL0NxQlVsVTFhMXJH?= =?utf-8?B?bDhKSUdVeW11ZVFIWkNSeGNzSEFqQThjZE5NYVVsa2NxUXVhVlVuTitUNTJC?= =?utf-8?B?UVVYd2hEcGVhMmpnY1hjZmZQRDJacmdNakR1L3ZNVU5WNkRrOTM2VGtlY3pa?= =?utf-8?B?Skt4NEtnSjlzT2NqM3dHRkhPZUdkeEE1SVZUTjI0SFBoTTJQdmJmVTBnblp4?= =?utf-8?B?RzkzUFVwT1NkNE5UVWZpQ2xzUm9MR3d5MWlkdWQzanFHNTAwakVOZ25KMnNu?= =?utf-8?B?aDhrcVptS3RmeFMyd3c3NHQzaEJBNDhvS1FyVUVseVhIMThycDdEQUVBem51?= =?utf-8?B?Qmlodk9CU0NDTFRRTnhnUEswTDcvRnhyMGJaUFZyMEVZMDFYTzEvaDhJLzdi?= =?utf-8?B?K2J2aG1ydGd6RXVRcnpNVVJEZVBsZVhYVVhnTURORWhkdHpRYUpUOGI0Sldl?= =?utf-8?B?ZWxJSTQyZytSU3RWR0xCOGIrWHd2dlptMklyZXFnbWtWajRuZlozVDhwMUNC?= =?utf-8?B?dVlIVnFkZ2U5ckl2ZXAyRFJlVkFERXZEdU40SkE5alBBQ0VrQW1CQUd3TjZS?= =?utf-8?B?MHVSTE0zTEdLT1lFdUFUZHRtNDF2eDVxNjFlN09ncTYwcnJDSTdBSnhkWnZ3?= =?utf-8?Q?WjtqY4BqBpgNVhK6eDbq2DXDRq2N7MMlTVVcJ5mBnbZo=3D?= X-OriginatorOrg: sct-15-20-4734-24-msonline-outlook-c0b75.templateTenant X-MS-Exchange-CrossTenant-Network-Message-Id: 87b3b11a-52af-43c1-8117-08db50d22619 X-MS-Exchange-CrossTenant-AuthSource: PSAPR03MB5639.apcprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 May 2023 21:12:52.0860 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR03MB5547 X-Rspamd-Queue-Id: 4QG9qF4209z3Jnj X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:8075, ipnet:40.80.0.0/12, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N locate.database is created by /etc/periodic/weekly/310.locate, isn't it? It's behavior is run by nobody. The other thing that is often forgotten is that the group behaves as if a setgid bit has been set up in the directory. Is the idea that one daemon-specific user is sufficient, as long as setegid, seteuid, umask, fileowner, filepermission, and these settings are appropriate, out of date? :) Yuri wrote on 2023/05/09 17:19: > Brooks Davis wrote: >> On Tue, May 09, 2023 at 10:05:15AM +0200, Felix Palmen wrote: >>> * Felix Palmen [20230508 18:39]: >>>> I tend to think now that 'daemon' should really be the way to go when >>>> you don't need a dedicated account. Am I overlooking something? Any >>>> other comments? >>> >>> Seems I overlooked something indeed: >>> >>> #v+ >>> $ find [14-jail] \( -user daemon -or -group daemon \) >>> [14-jail]/usr/sbin/lpc >>> [14-jail]/usr/bin/lprm >>> [14-jail]/usr/bin/lpr >>> [14-jail]/usr/bin/lpq >>> [14-jail]/var/rwho >>> [14-jail]/var/spool/mqueue >>> [14-jail]/var/spool/lpd >>> [14-jail]/var/spool/output >>> [14-jail]/var/spool/output/lpd >>> [14-jail]/var/spool/opielocks >>> [14-jail]/var/at/jobs >>> [14-jail]/var/at/spool >>> [14-jail]/var/msgs >>> #v- >>> >>> So, daemon owns e.g. the print spool... >>> >>> Interestingly, ou even find something owned by nobody in base: >>> >>> #v+ >>> -rw-r--r-- 1 nobody wheel 0 Jul 8 2021 /var/db/locate.database >>> #v- >> >> This seems like a bug. > > Indeed, it's even in BUGS section in locate(1) :) > > The locate database is typically built by user “nobody” and the > locate.updatedb(8) utility skips directories which are not readable for > user “nobody”, group “nobody”, or world. For example, if your HOME > directory is not world-readable, none of your files are in the > database. > >>> >>> So, takeaway is: There is no safe choice other than allocating a >>> dedicated UID for every single daemon, even if it doesn't need to >>> own/access any files? Is this really correct? >> >> This is clearly the right choice even it's a bit of a pain. > > From nobody Wed May 10 15:39:19 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QGfMq6TS4z4B3Pr for ; Wed, 10 May 2023 15:39:19 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QGfMq4SGFz41lX for ; Wed, 10 May 2023 15:39:19 +0000 (UTC) (envelope-from portscout@FreeBSD.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683733159; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=76AOwheH76UFLr/gOwHf1gVkVOr+n0Pygsz73lREBzE=; b=ogF7GFqXfdUw355r9nDKoxI0PfVnG32alhmfLwiHZoeZUPAPiLL19pazA/uOTPNWTMhW7Y FHfjRsaikgrLy5zhI4dek2QvrC32n3+HW3XMaJVzI6GiDxzSo1mKicAVRQPS42BNSePaXZ 8oMHCPF2RLFpjTEACaQY7e2DjHjJ+jtpoXc5y92OfALd9p5ZXoe13pSYoZFX+OEwTcJZoy IYCdoJlBoeSclXLVpe6M5KTUvOOfhs8eVGX0Dchkyca4+FbB0QFpXQvIFJz2OAZH4li+sQ pIGbAV5E7C+KJNHWfhQlY6UFbrPIi1r8AuNiLef2Cqv77dD5MmEbYHvw2RvUsg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683733159; a=rsa-sha256; cv=none; b=FE3X5c/6mpThbZE9JMKK03NmqjVKlh56nVUxYoZBDDdn+ssLkKlwS9pMltSh9AR0g08Shn fVjRci5oYnbbaLa2s5ZkVYPyGyMi0YqLCEk20QC68XjVNe3CT3kmBTCez1A9jPemoPDQpO kZTSKc4NL1dhiPXCu33oEbFDzgs6E8Z2mWFmyRh3yfppS+lzoKrBZGz/X9fIiQPZr/rCVQ O+hgS6dL8eV8COWZS3aMC/4j7aRj459JN4Ditq1uXQORJhgwNTzOcsEL0UsqhL98B/Kw6p wB4mi8s0w/Jh1S7ZL5Vrcudrfx7wcfFARYGm+7HgsFs1uOtHkrinNxybfdVg3Q== Received: from portscout.nyi.freebsd.org (portscout.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QGfMq3VgBzGhg for ; Wed, 10 May 2023 15:39:19 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from portscout.nyi.freebsd.org ([127.0.1.10]) by portscout.nyi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34AFdJAs056734 for ; Wed, 10 May 2023 15:39:19 GMT (envelope-from portscout@FreeBSD.org) Received: (from portscout@localhost) by portscout.nyi.freebsd.org (8.15.2/8.15.2/Submit) id 34AFdJbv056733; Wed, 10 May 2023 15:39:19 GMT (envelope-from portscout@FreeBSD.org) Message-Id: <202305101539.34AFdJbv056733@portscout.nyi.freebsd.org> X-Authentication-Warning: portscout.nyi.freebsd.org: portscout set sender to portscout@FreeBSD.org using -f Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Date: Wed, 10 May 2023 15:39:19 +0000 From: portscout@FreeBSD.org To: ports@freebsd.org Subject: Unmaintained FreeBSD ports which are out of date X-Mailer: portscout/0.8.1 X-ThisMailContainsUnwantedMimeParts: N Dear port maintainers, The portscout new distfile checker has detected that one or more unmaintained ports appears to be out of date. Please take the opportunity to check each of the ports listed below, and if possible and appropriate, submit/commit an update. Please consider also adopting this port. If any ports have already been updated, you can safely ignore the entry. An e-mail will not be sent again for any of the port/version combinations below. Full details can be found at the following URL: http://portscout.freebsd.org/ports@freebsd.org.html Port | Current version | New version ------------------------------------------------+-----------------+------------ cad/ifcopenshell | 0.6.0 | blenderbim-230509 ------------------------------------------------+-----------------+------------ devel/py-archinfo | 9.0.5405 | v9.2.50 ------------------------------------------------+-----------------+------------ devel/py-cle | 9.0.5405 | v9.2.50 ------------------------------------------------+-----------------+------------ math/py-claripy | 9.0.5405 | v9.2.50 ------------------------------------------------+-----------------+------------ security/py-ailment | 9.0.5405 | v9.2.50 ------------------------------------------------+-----------------+------------ security/py-angr | 9.0.5405 | v9.2.50 ------------------------------------------------+-----------------+------------ security/py-pyvex | 9.0.5405 | v9.2.50 ------------------------------------------------+-----------------+------------ If any of the above results are invalid, please check the following page for details on how to improve portscout's detection and selection of distfiles on a per-port basis: http://portscout.freebsd.org/info/portscout-portconfig.txt Reported by: portscout! From nobody Wed May 10 18:40:40 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QGkPF3BRsz4BG8x for ; Wed, 10 May 2023 18:40:49 +0000 (UTC) (envelope-from fuz@fuz.su) Received: from fuz.su (fuz.su [IPv6:2001:41d0:8:e508::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "fuz.su", Issuer "fuz.su" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QGkPD40Vqz4Mkv for ; Wed, 10 May 2023 18:40:48 +0000 (UTC) (envelope-from fuz@fuz.su) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of fuz@fuz.su designates 2001:41d0:8:e508::1 as permitted sender) smtp.mailfrom=fuz@fuz.su; dmarc=none Received: from fuz.su (localhost [127.0.0.1]) by fuz.su (8.16.1/8.16.1) with ESMTPS id 34AIeenF059187 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Wed, 10 May 2023 20:40:40 +0200 (CEST) (envelope-from fuz@fuz.su) Received: (from fuz@localhost) by fuz.su (8.16.1/8.16.1/Submit) id 34AIeeFc059186 for ports@freebsd.org; Wed, 10 May 2023 20:40:40 +0200 (CEST) (envelope-from fuz) Date: Wed, 10 May 2023 20:40:40 +0200 From: Robert Clausecker To: ports@freebsd.org Subject: port request: mruby Message-ID: List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="USC2pUk+51wdx9n6" Content-Disposition: inline X-Spamd-Result: default: False [-3.55 / 15.00]; SIGNED_PGP(-2.00)[]; NEURAL_HAM_SHORT(-1.00)[-0.997]; NEURAL_HAM_LONG(-0.99)[-0.992]; NEURAL_SPAM_MEDIUM(0.84)[0.837]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:16276, ipnet:2001:41d0::/32, country:FR]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; MLMMJ_DEST(0.00)[ports@freebsd.org]; DMARC_NA(0.00)[fuz.su]; ARC_NA(0.00)[]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[]; FREEFALL_USER(0.00)[fuz]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[ports@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Queue-Id: 4QGkPD40Vqz4Mkv X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N --USC2pUk+51wdx9n6 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Greetings! I'm looking for someone who is interested in porting mruby: https://mruby.org/ MRuby is an embeddable ruby interpreter and is e.g. used by TIC-80. I don't speak Ruby and have trouble figuring out the build system. Perhaps someone with more experience wants to take this up? Yours, Robert Clausecker --=20 () ascii ribbon campaign - for an 8-bit clean world=20 /\ - against html email - against proprietary attachments --USC2pUk+51wdx9n6 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEExWcBrcoFY7LMaPxvWXxDScqS3gUFAmRb5SRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEM1 NjcwMUFEQ0EwNTYzQjJDQzY4RkM2RjU5N0M0MzQ5Q0E5MkRFMDUACgkQWXxDScqS 3gVU9w/+ICAwRh5IEV6C8cOG1F8ZZppRobRmq3ZGykGU+ODoCcxfiv+WeZ/m0ZcQ RaqkMTiYegOGgp5FtF5fPdRTFXGP2DPDOr1YVHI0jk/1HEYcrM7h55nSD7unrklW VxhEllCZwSjcdZHwCBCxEDZh9mHCcl6TSZhmD/yTeAbtFlh0LsQ7r/djnFYudghk FxwYfB23YktXxZvElOycV5IzBxmaxUIYPn+D6obi4Lf3N92j0Id1hlJD0wZBZJC/ UwtqO9hNNbKsmm+cD6n5O3zhiZhyYmf8ZjyAHjIFJZwgio+eeWo0vescguCdpsA+ tJ1GiDFqsRhcgkcP8xSENIhL4CH+rIOHJS7XjHKSGb2/nXSEr1S8ZRmkIJS7p6kH nDhF2NPonIW54og0WO+cDXQBRh7+APxDSSsmv2P811aArV1G3UhxlG0bPLRCEyqJ jbcOeyxYNb8sUsib1jRRjNpYOOfYc/uAOg2q3Et/SRPxL03gMm7PNo/gbLmSheo6 81HMTZ4nTnVXd+Nz4ksfAY5WrGuITJG/YIMl+w19FCf2a8zSIsCL7cj3K22/vAqN H7A79mqC3Bg4xB0IkDSzQcEk2SqSeoHEjUAkEl/1/rEX+1BGdqqsxhgJvxvzsW1J Bom9kusDUR8zfpZINSaAMmI1cbdf8pFlxZZguhBFSSl9n1AY+Pg= =G7rh -----END PGP SIGNATURE----- --USC2pUk+51wdx9n6-- From nobody Wed May 10 18:43:12 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QGkS50GMkz4BGZr for ; Wed, 10 May 2023 18:43:17 +0000 (UTC) (envelope-from joneum@FreeBSD.org) Received: from toco-domains.de (mail.toco-domains.de [176.9.100.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4QGkS43KQ7z4NYK for ; Wed, 10 May 2023 18:43:16 +0000 (UTC) (envelope-from joneum@FreeBSD.org) Authentication-Results: mx1.freebsd.org; none Received: from [IPV6:2003:e2:b701:e000:9d77:43cf:67d1:24a] (p200300e2b701e0009d7743cf67d1024a.dip0.t-ipconnect.de [IPv6:2003:e2:b701:e000:9d77:43cf:67d1:24a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by toco-domains.de (Postfix) with ESMTPSA id 2D57E21B884; Wed, 10 May 2023 20:43:13 +0200 (CEST) Message-ID: <93e7e898-e327-76df-3c68-7521ce5da204@FreeBSD.org> Date: Wed, 10 May 2023 20:43:12 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.10.1 Subject: Re: port request: mruby To: Robert Clausecker , ports@freebsd.org References: Content-Language: de-DE From: Jochen Neumeister In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4QGkS43KQ7z4NYK X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:24940, ipnet:176.9.0.0/16, country:DE] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N Hello, we have a list in Wiki where you can enter it. If someone is interested, they will take it: https://wiki.freebsd.org/action/recall/WantedPorts Cheers Jochen Am 10.05.23 um 20:40 schrieb Robert Clausecker: > Greetings! > > I'm looking for someone who is interested in porting mruby: > > https://mruby.org/ > > MRuby is an embeddable ruby interpreter and is e.g. used by > TIC-80. I don't speak Ruby and have trouble figuring out the > build system. Perhaps someone with more experience wants to > take this up? > > Yours, > Robert Clausecker > From nobody Thu May 11 16:36:57 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QHHbs3fxhz49S2s for ; Thu, 11 May 2023 16:36:57 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QHHbs1whzz3D3G for ; Thu, 11 May 2023 16:36:57 +0000 (UTC) (envelope-from portscout@FreeBSD.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683823017; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=e2pSqjXZQ2ect9EYysvDQ5VRPTNAs2qdeamFQz/F57Y=; b=Z3FgrzNbFWq38S3DeTF7kgktHLQAqIVPV36NubrfWd598DzU/XahtKeAC+2RjYc9E1rvCf DocmGAGGiMAy1rrQIN6WCeshZ7tkve3vBvqy/GomV4hlZGehbCXaTrFoW2UzhwMGxMdzW2 MRtEgewnrqugvXdFitNnvOn7xMbQWaiFAGHCoOX8RnPcb19oNdPA1vmysCGt0QkzCYOJX+ XtiWNMIZfh4gsS65HEI5o/FM2NnsW/o8712UB2WvUQLuTSPtPZyrvaS4S+oPWi1AwuOfG5 nRgc7Hs9I+f2GIPcKBZCoBEQHX24kaWGxNyJuqI22TL222OqfQKtl/RHZpOlcw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683823017; a=rsa-sha256; cv=none; b=EXZCG4FpfXOh2ZSF0N4KVP/uq2eXlLxh4T5Gh9H1dEMHqq7BFaNhY0NfXLbQTEBvsFEMHk JOPJExVJgx1RFAbOXZGvkfZTqLoNtYF3KkiMmds1GV81+8sVEMaw4wDfWskuGCCMWzkxOe lmsr0HnxjembRTOJMfSPEDH1/bjprTaaLY61Ltx/hH37B65kQhL7nIutsRZTNKtRqoJ70H 0mPHMNb7V1Q3aHaaTNiOkUQvKHl75vuHp3hxWTvSEMnWVy3VlKn9HmWIQ2Hh7/S/qdYPuG YpHgsOv6rtHkD60Ou1lIeQLwawV5a4YnBD6sZ5kgRSxuzDkNdm0BgL7LsJSvBw== Received: from portscout.nyi.freebsd.org (portscout.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QHHbs0tM2z1161 for ; Thu, 11 May 2023 16:36:57 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from portscout.nyi.freebsd.org ([127.0.1.10]) by portscout.nyi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34BGavmx005244 for ; Thu, 11 May 2023 16:36:57 GMT (envelope-from portscout@FreeBSD.org) Received: (from portscout@localhost) by portscout.nyi.freebsd.org (8.15.2/8.15.2/Submit) id 34BGavkS005243; Thu, 11 May 2023 16:36:57 GMT (envelope-from portscout@FreeBSD.org) Message-Id: <202305111636.34BGavkS005243@portscout.nyi.freebsd.org> X-Authentication-Warning: portscout.nyi.freebsd.org: portscout set sender to portscout@FreeBSD.org using -f Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Date: Thu, 11 May 2023 16:36:57 +0000 From: portscout@FreeBSD.org To: ports@freebsd.org Subject: Unmaintained FreeBSD ports which are out of date X-Mailer: portscout/0.8.1 X-ThisMailContainsUnwantedMimeParts: N Dear port maintainers, The portscout new distfile checker has detected that one or more unmaintained ports appears to be out of date. Please take the opportunity to check each of the ports listed below, and if possible and appropriate, submit/commit an update. Please consider also adopting this port. If any ports have already been updated, you can safely ignore the entry. An e-mail will not be sent again for any of the port/version combinations below. Full details can be found at the following URL: http://portscout.freebsd.org/ports@freebsd.org.html Port | Current version | New version ------------------------------------------------+-----------------+------------ cad/ifcopenshell | 0.6.0 | blenderbim-230511 ------------------------------------------------+-----------------+------------ x11-themes/qgnomeplatform | 0.6.1-8 | 0.9.1 ------------------------------------------------+-----------------+------------ If any of the above results are invalid, please check the following page for details on how to improve portscout's detection and selection of distfiles on a per-port basis: http://portscout.freebsd.org/info/portscout-portconfig.txt Reported by: portscout! From nobody Fri May 12 15:51:40 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QHtY9185Dz4B9dV for ; Fri, 12 May 2023 15:51:41 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QHtY86Npbz4Dbb for ; Fri, 12 May 2023 15:51:40 +0000 (UTC) (envelope-from portscout@FreeBSD.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683906700; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=NoKCbq0CWwAkBc4+2oGCFFPoRYx5GabnCoj+jmO2Kg0=; b=YUaSOj87DyVeEZL6mlDTD+p4uS8Bbv0ZIndiQqLbuCIn2P0YM+6hS85FLwJx994P85LD98 WgzrqZ7DS0AZ9wwU/ycNli9MBQ0A0ajGz3SUQI76QD4rY2CatchWU8ktvtb7iT/Ym34h8h hrjRJcWf/F301qPCc6u1/sf+8l6GpiKg3/716hGeqQCOi/XxxnbdqJt+Vuo4LMRKgUUxOc X2L91grVBRNkb2rJF2Dm/eJj8OTE5s3QPoOcfwJAyvlPTO0g7LeLzkqHrjQjVqYdz6gQbA ZAxF76/KiBtPWIsswHmbbD9HGdf9eUKiw0amt9I3pbRdQYkgqd0QFuV8lVZAYQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683906700; a=rsa-sha256; cv=none; b=wRgGpejFKpCFhvR/Q89tRRJFqL7wGZ3/Hg22gXfIOljNgyiqTzKNtjy0Uty8dOjYbcV5XK p6LHGEVUy+CCzPK7Aupq2NYDscSzedOS5f5PSuyb4Y3gmVRsBpEaQygDQfG0HN44oQH5YF 6k/SIstEmZQPUxmBTlNZ7BHwgq+SB6QXPUk9rBMQM76Nt3rr/IxNuxfLmONhUcREm/6mN6 1jJwMo+MeSaAJ1tIWNjn2J57b9Qw0EA6BFu3tPy3x0PH9lnDD2sFMLr15rRSZI8F0YGL0M siUJVvuJZlbsCJYpWBLquOYyDJhT5bavFTKDc2TfXKTXa4YWj/vJezgcIoE3lw== Received: from portscout.nyi.freebsd.org (portscout.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QHtY82qkrzhXh for ; Fri, 12 May 2023 15:51:40 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from portscout.nyi.freebsd.org ([127.0.1.10]) by portscout.nyi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34CFpeS7085130 for ; Fri, 12 May 2023 15:51:40 GMT (envelope-from portscout@FreeBSD.org) Received: (from portscout@localhost) by portscout.nyi.freebsd.org (8.15.2/8.15.2/Submit) id 34CFpeLZ085129; Fri, 12 May 2023 15:51:40 GMT (envelope-from portscout@FreeBSD.org) Message-Id: <202305121551.34CFpeLZ085129@portscout.nyi.freebsd.org> X-Authentication-Warning: portscout.nyi.freebsd.org: portscout set sender to portscout@FreeBSD.org using -f Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Date: Fri, 12 May 2023 15:51:40 +0000 From: portscout@FreeBSD.org To: ports@freebsd.org Subject: Unmaintained FreeBSD ports which are out of date X-Mailer: portscout/0.8.1 X-ThisMailContainsUnwantedMimeParts: N Dear port maintainers, The portscout new distfile checker has detected that one or more unmaintained ports appears to be out of date. Please take the opportunity to check each of the ports listed below, and if possible and appropriate, submit/commit an update. Please consider also adopting this port. If any ports have already been updated, you can safely ignore the entry. An e-mail will not be sent again for any of the port/version combinations below. Full details can be found at the following URL: http://portscout.freebsd.org/ports@freebsd.org.html Port | Current version | New version ------------------------------------------------+-----------------+------------ cad/ifcopenshell | 0.6.0 | blenderbim-230512 ------------------------------------------------+-----------------+------------ multimedia/ytfzf | 1.2.0 | v2.6.0 ------------------------------------------------+-----------------+------------ net-im/signal-cli | 0.9.0 | v0.11.10 ------------------------------------------------+-----------------+------------ www/R-cran-httpuv | 1.6.9 | 1.6.11 ------------------------------------------------+-----------------+------------ If any of the above results are invalid, please check the following page for details on how to improve portscout's detection and selection of distfiles on a per-port basis: http://portscout.freebsd.org/info/portscout-portconfig.txt Reported by: portscout! From nobody Sat May 13 04:30:17 2023 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QJCNs2wFbz4BrYL for ; Sat, 13 May 2023 04:30:37 +0000 (UTC) (envelope-from tatsuki_makino@hotmail.com) Received: from APC01-SG2-obe.outbound.protection.outlook.com (mail-sgaapc01olkn2082.outbound.protection.outlook.com [40.92.53.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QJCNq5d2Cz4KD8 for ; Sat, 13 May 2023 04:30:35 +0000 (UTC) (envelope-from tatsuki_makino@hotmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=hotmail.com header.s=selector1 header.b=UV+0EHTx; spf=pass (mx1.freebsd.org: domain of tatsuki_makino@hotmail.com designates 40.92.53.82 as permitted sender) smtp.mailfrom=tatsuki_makino@hotmail.com; dmarc=pass (policy=none) header.from=hotmail.com; arc=pass ("microsoft.com:s=arcselector9901:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Py1uj6D+lBIiRb9QO0KEfIZHBoTk6tMK0sY8M2DuJGXyzavH45Lrbc2tflEt4bOgdEjgwQ4RW042+rRzCTWPgLBfzDsGWOy644QJ9bIUc0RnkNH01LifBY4JzD//jyGcVsQWz2329Lu/kMsU19GCd9XiInUtqN3YYrPxr5skAINtUufFXEUVmJ7NpsBml2j5phewzxfTjM4i2mvWudjvFXfV5R6E3/GX2zM9xL3RP5OpRl0uFsSPKBQ2LpcsOcNf+ib8V9pNNUkmpwKWLqJf7E/5V4nWiqY6CawRv6GCieZNby2yMDEulTIDeph92YXPZ4KlJAeFc7m95pwMyg4xcA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xInj43IegWVZwP8LgbnRKDMstD0TQhb4fOjiHJr0acw=; b=ecMnPivjmbL/DI4Gtf9FZ6XgKYxzCUM8XiGvaQjHidyIopYeMYR/UNWMI4Rxl0UjSt4Mr67bmQm46R31+cSuVId+d2bDeU05I5sqUhyb9rcyONbFFuHYGK4f5TBz9SuRrcDT/MaUHdSbfmcKURuCL1fxgtwfSXvyKPJnPrhj4jABhR+vDfmnPhHq0JEjoTdxWX5yL2NAvATtXppZL3HWT40sszlduFMpyZ9gE6laFTXItJfWc7nuV3tjAt59eAKwVHG3eEtZb2XsySDq6ZUhnuVtGZlAShlHp1s8+oh9KbJRWr2+5HOPcrf8UzJk/tA27Yg/Gph3uXpM3ggkpW9kFw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xInj43IegWVZwP8LgbnRKDMstD0TQhb4fOjiHJr0acw=; b=UV+0EHTxhmU66mLTJGb/lp8ecNbTq3hgdyO4G0IeMDtM/lS9Tli2HxHJ6M2eePhufZ3CLx2PdaVCU9RYACaVGlxVo+YyBhHfIfUE7XTNJpVU8B5VzWHBJKepluAFSs2UbKAo+nf+R/+SkFovN0+3EWy6HeDgvflhbSdVKeRx3V4+ZGsmilopqBQpL89UjGycDhiNCkm25+XUEAv95lj6MxX3IqnLUUQWSMiL2aJLSB1Q3ijU4Vj5ytj88ocSaeO8rZhxBKzyjAQHx5WmOj2GJjh3JL5Z3jemieHKMJHQftlT2DtMA31PTneJIKvxJdlX+CMGkk2fJbdVA+DCdFDasw== Received: from PSAPR03MB5639.apcprd03.prod.outlook.com (2603:1096:301:66::13) by PUZPR03MB7160.apcprd03.prod.outlook.com (2603:1096:301:118::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6387.23; Sat, 13 May 2023 04:30:30 +0000 Received: from PSAPR03MB5639.apcprd03.prod.outlook.com ([fe80::5519:737a:788f:81f8]) by PSAPR03MB5639.apcprd03.prod.outlook.com ([fe80::5519:737a:788f:81f8%5]) with mapi id 15.20.6387.025; Sat, 13 May 2023 04:30:30 +0000 To: "freebsd-ports@FreeBSD.org" From: Tatsuki Makino Subject: Conditions under which make makepatch fails Message-ID: Date: Sat, 13 May 2023 13:30:17 +0900 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.4 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-TMN: [QNCEtkJsKP/5ezCACjwfJsybY8H+Vx+q] X-ClientProxiedBy: SI2PR01CA0012.apcprd01.prod.exchangelabs.com (2603:1096:4:191::8) To PSAPR03MB5639.apcprd03.prod.outlook.com (2603:1096:301:66::13) X-Microsoft-Original-Message-ID: <0a992138-2206-fb6b-7744-012066abc908@hotmail.com> List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PSAPR03MB5639:EE_|PUZPR03MB7160:EE_ X-MS-Office365-Filtering-Correlation-Id: 1e03e626-ae24-4d5c-0947-08db536ac857 X-MS-Exchange-SLBlob-MailProps: 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 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?dTZsRHo3WFh0bmRPbGJDV3F5OTFXcGdXZ3JxY09CczB4aitWTlYxeTdZcWpT?= =?utf-8?B?dUxTUjRCV3BPSW1yOGwxZGFucEZrK0F1TkQzdVFyMngvWUdiLzVZN3NzU3JM?= =?utf-8?B?U1E1UHd5eFVSbkxhTEtmaUtPMU51T3pVZ3BiSXZxMG5acis1MTdXUW1Oam5V?= =?utf-8?B?YjJRQWRXNG8vbkd6SjJadkFzdzVaYzB2VkZZejNDZVdwNC9aME5URlYyRVN5?= =?utf-8?B?eTN5aFhPVjh4NFpTMFBvOUx2MUxhU1lwdVI3VTJ4NVVlYjdwalB0LzNqR2p6?= =?utf-8?B?aEtid2dpMENDb0YzUjhOZ0FWbWVJdkJKZE1aR1Y1eWRRR2FXT2lkTmtJSlY4?= =?utf-8?B?M05jQ1ljb2Z0QndaMS9EeXdmNlRvQ01YS0M0Y2hPTVQ5bEZ5SXhBNFIrK3ow?= =?utf-8?B?SzdEakF6MDNYeWNvQWs4MDFRckkvSnBsRzNLS2E0MzIwd3dsVzNEd2ZXSGdM?= =?utf-8?B?M1FvYSt5cSsxSEJnZ3NGbFV6Q1JpZktUUTBnVVErNW5KOTZhcVdPNHE5REJl?= =?utf-8?B?aXUyczd0M1JjYmhqMWIzTWhKSk94WXV5ZXh2aDdrMit6ZFhIbU03T3RZV1pV?= =?utf-8?B?NnQ3cVhsS3hqQlZZYSszM0xZNXlzYllveXpxMmNKa1FoV3BOMmxObGdiK1M3?= =?utf-8?B?QWQvbnpHL2haKzl5d3RydDRxNkowT0x3MGRkRHN3VVJNT3BXazVPVmxRWXpo?= =?utf-8?B?OVpxdWJHczI1ZnFaS0NNR0tDWTZvdDQ2QS9TUG1xUHNyRGlZYmU1cXVYNkZI?= =?utf-8?B?Zk91QlJkd0lOeWZkZUx1bmsyY1NRRnpNUUM1emw3NExkZjFURnFYam5Kdlhh?= =?utf-8?B?L2J5N0pVOUk0S1FLZGFieG9wa094a1Y5Lzh6VEFzVmpZSEJmcThteTdJMzR6?= =?utf-8?B?QU9nWVora1poT0JPT1NXSFp0eWpUVk1LODZ5cHl5clhMTllXdklHd1NRSUR3?= =?utf-8?B?Q3daTGFqblc5VUJWM3BwakpPbVdrTUJncmJsYi91WHlEeWUvc3d1YU01KzVS?= =?utf-8?B?Y1ZDM2Z3eXJZdmgxSzJCVmQ3U1NrZHlGRFBldGRZYTZPMGNTU0NZRjByMkxh?= =?utf-8?B?aTRjK1dZM3FGMEZCR0R6V2Fxa3piR1dPME8vUUE1YjB4YldvalVIUEFHcm9o?= =?utf-8?B?QkpiZlRyRXpOWXNQTDA4M3BicVVWUXhhZ1FlZjJqTERQU3h2UUM5RTEvOGRk?= =?utf-8?B?QUlLbnU5ZzQ5TmpPaVVneFRFWExMeFEwckVNaDZYVW42VXh5S0JiS2V4MzNE?= =?utf-8?B?YzJsckFBdTdZN1ZWQmJ3K3pYdnVjbjBWWEc5eFNCTVVFa1JUTHNWbUEyR0hp?= =?utf-8?B?dHM1Y3JiUGpkOUxyeXFBMFcwanZpUXY5TUdqQkp2TnBvbExmaUJrM2NmcW9Z?= =?utf-8?B?Nmd5Y25wWGo2SFFjemlpaU40akU0SHJMak5lQ3lvU3FMRm4rNFhWejJKK3I1?= =?utf-8?B?cjBlQkFuUVl4MUljVlVFdllNaTZ4Zk5QTFRCdHdic3BFdGxxVEJjRzdwS2lZ?= =?utf-8?B?T2hNMXVCUUFGSXc1TGo4cWJrZXg4MEtRL3dXWlJmT2JESzZqMXdneEUwem5i?= =?utf-8?B?N09lRFp1V0haMFl3bkpNTTAwc0NRY2lqd1I4QXBCSGhyNmV3eFBQRzhIR1Q5?= =?utf-8?Q?1u8nDZhZS/uTW2GtxWSDU3bC9H7oSWTT6SR0NSJo2O+I=3D?= X-OriginatorOrg: sct-15-20-4734-24-msonline-outlook-c0b75.templateTenant X-MS-Exchange-CrossTenant-Network-Message-Id: 1e03e626-ae24-4d5c-0947-08db536ac857 X-MS-Exchange-CrossTenant-AuthSource: PSAPR03MB5639.apcprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 May 2023 04:30:30.0872 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR03MB7160 X-Spamd-Result: default: False [-2.22 / 15.00]; FORGED_MUA_SEAMONKEY_MSGID_UNKNOWN(2.50)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector9901:i=1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.87)[-0.870]; NEURAL_HAM_MEDIUM(-0.85)[-0.851]; DMARC_POLICY_ALLOW(-0.50)[hotmail.com,none]; R_SPF_ALLOW(-0.20)[+ip4:40.92.0.0/15]; R_DKIM_ALLOW(-0.20)[hotmail.com:s=selector1]; MIME_GOOD(-0.10)[text/plain]; TO_DN_EQ_ADDR_ALL(0.00)[]; MLMMJ_DEST(0.00)[freebsd-ports@freebsd.org]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:8075, ipnet:40.80.0.0/12, country:US]; FREEMAIL_ENVFROM(0.00)[hotmail.com]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_THREE(0.00)[3]; RWL_MAILSPIKE_POSSIBLE(0.00)[40.92.53.82:from]; FREEMAIL_FROM(0.00)[hotmail.com]; FROM_HAS_DN(0.00)[]; DKIM_TRACE(0.00)[hotmail.com:+]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_NONE(0.00)[hotmail.com:dkim] X-Rspamd-Queue-Id: 4QJCNq5d2Cz4KD8 X-Spamd-Bar: -- X-ThisMailContainsUnwantedMimeParts: N Hello. I often use make makepatch because it is very useful, but under certain conditions, new patches are not written out to PATCHDIR directory. The condition may be patched such as /usr/ports/www/firefox/files/patch-libwebrtc-generated. This patch includes patches for the following files --- third_party/libwebrtc/third_party/pipewire/pipewire_gn/moz.build +++ /dev/null This leaves only files with the name *.orig. The patch is generated because there is a file with the name *.orig. However, its contents are empty. If an empty file exists, install_regenerated_patches in Mk/Scripts/smart_makepatch.sh will not do its job of writing to PATCHDIR. All the finished patches are in ${WRKDIR}/.makepatch-tmp/staged directory, so the necessary patches should be taken from there. This makes it look as if the patch failed to generate, is this already a known behavior? Regards. From nobody Sat May 13 12:43:02 2023 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QJQKL0B5Dz4BLZq for ; Sat, 13 May 2023 12:43:18 +0000 (UTC) (envelope-from xavier@groumpf.org) Received: from aragorn.amdh.fr (aragorn.groumpf.org [176.31.180.205]) by mx1.freebsd.org (Postfix) with ESMTP id 4QJQKJ00W6z43DS for ; Sat, 13 May 2023 12:43:15 +0000 (UTC) (envelope-from xavier@groumpf.org) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=groumpf.org header.s=dkim header.b="U jgrhrX"; spf=pass (mx1.freebsd.org: domain of xavier@groumpf.org designates 176.31.180.205 as permitted sender) smtp.mailfrom=xavier@groumpf.org; dmarc=none Received: from numenor.groumpf.org (82-64-247-11.subs.proxad.net [82.64.247.11]) by aragorn.amdh.fr (Postfix) with ESMTP id 52448200003B0 for ; Sat, 13 May 2023 14:43:08 +0200 (CEST) Received: from numenor.groumpf.org (localhost [127.0.0.1]) by numenor.groumpf.org (Postfix) with ESMTP id 287181BDCF9 for ; Sat, 13 May 2023 14:43:08 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=groumpf.org; h= content-transfer-encoding:content-type:content-type:subject :subject:from:from:content-language:user-agent:mime-version:date :date:message-id:received:received; s=dkim; t=1683981783; x= 1684845784; bh=yyKXtiCiyy9m/Aw77GudKzs59Q5OAX7pocN23QB2pBE=; b=U jgrhrXzWhJ5Plk+q1TPfz2wT0QNrkAJ/IAz7hteKTGpijgGTDYaDjfZbXbNKew+E v7wUILP2U/nss8FZhtx5TgzzkpI0l0JlDHWsN1hI1xndN/JdeU3ITS8A9M1VLWuz uLStg/saKl/iRSd8vBwwgrfJs6DmUu2H1QVjukvHC0ja73zz4/VRevTXvwFoo4Ba hO0KIS6064ghaKtPkAiJtsmss8RWjBpVTkGgsydU6tB69CYlKvSF8gNv9WSxEqxU Bk/9YX8J0AklO4iIMY9sO02l66Q8kCx0+vOUuZ+2Skt0YMIRuaLyBF4V6QzS4FEx avvqCP3GvvwJQvRk2LtQi9yyNPWlsA0h17gDKUQiwjlxV5Yik/bviZI/1wTBV2gm xhM0en8VvtkWEu+GFmYhMm6Uw9FsVqcQPZt23N21M/VRnuKosr142XgwXsY/GAJO 3Q7OGiobcSy9F5jP+lIlFWSkCrG9xx8KZct1nqXaAH3/z6024imeKpUeJh9Wxeat jQYpLSFYdXEyIITLHqfmKKh1e6i8WGeTxryVvrHbDtdUV8fuAkYSeGOunK88WOfb gHTzjUqM0g1atGUyoJau2QfqR9B6nXs8bQjucg4sIEE7aloM2AGWI5wArB+Q5eGQ Ve/RBKwIXshLBPOpMsVodsEZ+E4wedhdFC/wD3nXIM= Received: from numenor.groumpf.org ([127.0.0.1]) by numenor.groumpf.org (ns3.groumpf.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id QIIdXokHcCSh for ; Sat, 13 May 2023 14:43:03 +0200 (CEST) Received: from [192.168.100.30] (imladris.groumpf.org [192.168.100.30]) by numenor.groumpf.org (Postfix) with ESMTPSA id 0F9061BDE04 for ; Sat, 13 May 2023 14:43:03 +0200 (CEST) Message-ID: <6162831e-19d8-42be-dee2-4263bd69a0a6@groumpf.org> Date: Sat, 13 May 2023 14:43:02 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: fr, en-US To: FreeBSD Ports ML From: Xavier Humbert Subject: How to determine ports affected by ABI change Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spamd-Result: default: False [-3.39 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; R_SPF_ALLOW(-0.20)[+ip4:176.31.180.205]; R_DKIM_ALLOW(-0.20)[groumpf.org:s=dkim]; MIME_GOOD(-0.10)[text/plain]; RCVD_NO_TLS_LAST(0.10)[]; XM_UA_NO_VERSION(0.01)[]; DKIM_TRACE(0.00)[groumpf.org:+]; TO_DN_ALL(0.00)[]; MLMMJ_DEST(0.00)[freebsd-ports@freebsd.org]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; DMARC_NA(0.00)[groumpf.org]; RCVD_COUNT_FIVE(0.00)[5]; ARC_NA(0.00)[]; ASN(0.00)[asn:16276, ipnet:176.31.0.0/16, country:FR]; FROM_HAS_DN(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-ports@freebsd.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Queue-Id: 4QJQKJ00W6z43DS X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N Hi, I'm planning in a few days, as soon as it beeen branched, to upgrade base from 13-STABLE to 14-STABLE I'm trying to avoid to rebuild my > 1600 ports. Is there a wayto determine ports affected by the ABI change, which must be recompiled ? Obviously Pure Perl or Pure Pyhton don't need to. Cheers, Xavier -- Xavier HUMBERT - Unix/Win/MacOSX Sysadmin/Network Engineer https://www.amdh.fr From nobody Sat May 13 14:03:35 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QJS645ZpGz4BPw2 for ; Sat, 13 May 2023 14:03:40 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QJS64509Gz4D8c for ; Sat, 13 May 2023 14:03:40 +0000 (UTC) (envelope-from matthew@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683986620; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=Jf7vWrmf0Q9RtsRmwiPkZmXoBmwALcJ4h3dkjnDysEo=; b=Q4XUJFBUcIWh0NywJv8jYgxNTAyVXey3x4zjfZjGM7nbUzS+LuydTdJaBPqR0PmVAo/5/0 3KoWzLpcPlOnLi60/03QZh7RXPLXEML+IR1pXcnmRBEhM3gvjba/2tU9fzTr/1cwaSztic eLE6GwAc013ae4tGk7h3ngScSAA5b/YGPnvacbntNFlW4OwUgjy+QGpGfMimmX8SsPbITY fvJyTwFXNJxhtxU+z+Pq/Z972Iz5gpvFZPVCPCacoeM7PssqeeWYqxuLqlLEYx9+UlKVFI rbISzkJg6aHCh8PyNiLXjKiuwm3p/UNERWpe7kjJ1ByK3g/ImVCxh4v1KkOM6w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683986620; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=Jf7vWrmf0Q9RtsRmwiPkZmXoBmwALcJ4h3dkjnDysEo=; b=u3mzWk7TrggaFbAgVtX6vuWsEXjV6Nliz3DhHFWqwSs7wLe2J4vgZ3TmG9bzWGgL3kH5Pd UOkOfkXbAdcgcXW/rXO3q0ANgC5Zg/ksgYJJykVI82IscICDpp8EqhBVLXaOVbw0JIn/nB hUFkXxWLZPxxaIbTcHd+cRo576KfmsrF4amIxpvFHtnIXrrXdnKBe/fzmc50YUw8JY7cy/ cj/F7wtgb3zQvf2sYW9ZcusFYPgN+1HDKzoeo2B45iMTeGoDpTr180/ChP1UBNi/Z2AodC GujQ/r+pUrX/CJycxc6l8WrY/skzw45J8BqjCqRDJemYeKSOs6/oB93FotD5xA== ARC-Authentication-Results: i=1; smtp.infracaninophile.co.uk; dmarc=none (p=none dis=none) header.from=FreeBSD.org ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683986620; a=rsa-sha256; cv=none; b=JYeaUDeLE7LGnf9Httvb8L1XXt8TSuA8QOvoqbHCHuoCTyutAmSofUM54Uk3WJIK4blmQg +OqDzeu2u/9IfsN1t5tN7miIu8n7zgeW1Bz8ILdLllo/3eLnYo3mkAL4TIB2w78r6his+w WzaVImjLlt1ORZgK46jc7IEcAJiakdPkw9GlxAz6pyaWe14g7vFjWiebhjF0Mgi/lQDOjY xLufbXQ+63JfEgAvI419rNnRnATnUEboRr9tGsSsonoSF5dDJzP0ph34xo1xBviGlGHVNX 8KbmUSacpII65rPh8X1kAI3Do0ek2TRtOReQVbSN/5llk1lA8kL0YS/gUx5/tw== Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: matthew/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4QJS642GGkz1FBJ for ; Sat, 13 May 2023 14:03:40 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from [IPV6:2001:8b0:151:1:28e0:f64c:d731:f42e] (unknown [IPv6:2001:8b0:151:1:28e0:f64c:d731:f42e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 68EFD166F5 for ; Sat, 13 May 2023 15:03:36 +0100 (BST) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none (p=none dis=none) header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/68EFD166F5; dkim=none; dkim-atps=neutral Message-ID: <988465e8-3793-2829-590c-1207f60422df@FreeBSD.org> Date: Sat, 13 May 2023 15:03:35 +0100 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.10.1 To: ports@freebsd.org References: <6162831e-19d8-42be-dee2-4263bd69a0a6@groumpf.org> From: Matthew Seaman Subject: Re: How to determine ports affected by ABI change In-Reply-To: <6162831e-19d8-42be-dee2-4263bd69a0a6@groumpf.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------MNtOa4Pzrh3028vgnHLpJCxG" X-ThisMailContainsUnwantedMimeParts: N This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------MNtOa4Pzrh3028vgnHLpJCxG Content-Type: multipart/mixed; boundary="------------B4NVuAGmeI8DIX7epkpQ4IXk"; protected-headers="v1" From: Matthew Seaman To: ports@freebsd.org Message-ID: <988465e8-3793-2829-590c-1207f60422df@FreeBSD.org> Subject: Re: How to determine ports affected by ABI change References: <6162831e-19d8-42be-dee2-4263bd69a0a6@groumpf.org> In-Reply-To: <6162831e-19d8-42be-dee2-4263bd69a0a6@groumpf.org> --------------B4NVuAGmeI8DIX7epkpQ4IXk Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMTMvMDUvMjAyMyAxMzo0MywgWGF2aWVyIEh1bWJlcnQgd3JvdGU6DQo+IEknbSBwbGFu bmluZyBpbiBhIGZldyBkYXlzLCBhcyBzb29uIGFzIGl0IGJlZWVuIGJyYW5jaGVkLCB0byB1 cGdyYWRlIA0KPiBiYXNlIGZyb20gMTMtU1RBQkxFIHRvIDE0LVNUQUJMRQ0KPiANCj4gSSdt IHRyeWluZyB0byBhdm9pZCB0byByZWJ1aWxkIG15ID4gMTYwMCBwb3J0cy4NCj4gDQo+IElz IHRoZXJlIGEgd2F5dG8gZGV0ZXJtaW5lIHBvcnRzIGFmZmVjdGVkIGJ5IHRoZSBBQkkgY2hh bmdlLCB3aGljaCBtdXN0IA0KPiBiZSByZWNvbXBpbGVkID8gT2J2aW91c2x5IFB1cmUgUGVy bCBvciBQdXJlIFB5aHRvbiBkb24ndCBuZWVkIHRvLg0KPiANCg0KU2luY2UgbGliYyBhbmQg b3RoZXIgc2hhcmVkIGxpYnJhcmllcyBpbiB0aGUgRnJlZUJTRCBiYXNlIHN5c3RlbSB1c2Ug QVBJIA0KdmVyc2lvbmluZywgYWxtb3N0IGFsbCBvZiB5b3VyIHBvcnRzIHdpbGwgY29udGlu dWUgdG8gZnVuY3Rpb24gb24gDQoxNC1TVEFCTEUuICBUaGVyZSB3aWxsIGFsc28gYmUgYSBt aXNjL2NvbXBhdDEzeCBwb3J0IHRvIHByb3ZpZGUgDQpjb21wYXRpYmlsaXR5IGZvciBhbnkg bm9uLXZlcnNpb25lZCBzeXN0ZW0gc2hhcmVkIGxpYnJhcmllcywgd2hpY2ggeW91IA0Kc2hv dWxkIGluc3RhbGwgYXMgcGFydCBvZiB1cGdyYWRpbmcgeW91ciBiYXNlIHN5c3RlbS4NCg0K U28sIG5vIG5lZWQgdG8gcmVidWlsZCBldmVyeXRoaW5nIGltbWVkaWF0ZWx5LiAgV2l0aCB0 aGUgb2J2aW91cyANCmV4Y2VwdGlvbiBvZiBhbnkgbG9hZGFibGUga2VybmVsIG1vZHVsZXMg d2hpY2ggd2lsbCBkZWZpbml0ZWx5IG5lZWQgdG8gDQpiZSB1cGRhdGVkIHRvIG9wZXJhdGUg d2l0aCB0aGUgbmV3IDE0LVNUQUJMRSBrZXJuZWwuDQoNCkhvd2V2ZXIsIGFzIHNvb24gYXMg eW91IHN0YXJ0IHVwZGF0aW5nIHBvcnRzIG9uIHlvdXIgbmV3IDE0LVNUQUJMRSANCnN5c3Rl bSwgdGhpcyBjYW4gY2hhbmdlIGFuZCBzaW11bHRhbmVvdXMgcmUtaW5zdGFsbGF0aW9uIG9m IHNldmVyYWwgcGtncyANCmJlIHJlcXVpcmVkLiAgVGhhdCdzIGdlbmVyYWxseSBhIGNvbnNl cXVlbmNlIG9mIHNvbWV0aGluZyBiZWluZyBsaW5rZWQgDQphZ2FpbnN0IGEgZGlmZmVyZW50 IEFQSSB2ZXJzaW9uIHNvbWV3aGVyZSBpbiBhIGRlcGVuZGVuY3kgY2hhaW4sIHdoaWNoIA0K bWF5IHJlcXVpcmUgdGhlIHdob2xlIGRlcGVuZGVuY3kgY2hhaW4gaW52b2x2ZWQgdG8gYmUg dXBkYXRlZCBhdCB0aGUgDQpzYW1lIHRpbWUuDQoNCk9idmlvdXNseSwgYXMgeW91IGNvcnJl Y3RseSBvYnNlcnZlLCB0aGF0IG9ubHkgYXBwbGllcyB0byBzb2Z0d2FyZSANCmNvbXBpbGVk IGRvd24gaW50byBtYWNoaW5lIGNvZGUgYW5kIGxpbmtlZCBieSB0aGUgc3lzdGVtIGxvYWRl ciwgbGQuc28gDQotLSBzdGF0aWNhbGx5IGxpbmtlZCBiaW5hcmllcywgaW50ZXJwcmV0ZWQg bGFuZ3VhZ2VzIChzaGVsbCkgb3IgcHVyZSANCmJ5dGUtY29tcGlsZWQgbGFuZ3VhZ2UgbW9k dWxlcyAocHl0aG9uLCBwZXJsLCBsdWEsIGphdmEpIHdvbid0IGJlIA0KYWZmZWN0ZWQuICBB bHRob3VnaCB0aGUgaW50ZXJwcmV0ZXJzIGZvciBhbnkgb2YgdGhvc2UgbGFuZ3VhZ2VzIGNv dWxkIA0Kd2VsbCBiZSwgYXMgd291bGQgYW55IG1vZHVsZXMgYnVpbHQgYXJvdW5kIGxvYWRh YmxlIHNoYXJlZCBvYmplY3RzLg0KDQpJbiB0ZXJtcyBvZiBwYWNrYWdlcywgdGhlIHRoaW5n cyB0byBsb29rIGZvciBhcmU6DQoNCiAgKDEpIGFyY2hpdGVjdHVyZSBpbmRlcGVuZGVuY2U6 IGBwa2cgcXVlcnkgLWEgJyVuLSV2ICVxJyB8IGdyZXAgLUYgJyonYA0KDQpBbHRob3VnaCB0 aGUgQUJJIHN0cmluZyBidWlsdCBpbnRvIHRoZSBwYWNrYWdlIHdpbGwgc2F5IGVnLiANCmBG cmVlQlNEOjEzOipgIGluZGljYXRpbmcgYSBzcGVjaWZpYyBtYWpvciB2ZXJzaW9uIG9mIHRo ZSBPUywgc3VjaCANCnBhY2thZ2VzIHByb2JhYmx5IF9kb24ndF8gbmVlZCB0byBiZSByZWNv bXBpbGVkIGZvciBhbiBPUyBtYWpvciB2ZXJzb24gDQpjaGFuZ2UuDQoNCiAgKDIpIE9mIHRo ZSBhcmNoaXRlY3R1cmUgZGVwZW5kZW50IHBhY2thZ2VzLCBjaGVjayBmb3IgdGhvc2UgcmVx dWlyaW5nIA0Kb3IgcHJvdmlkaW5nIHNoYXJlZCBsaWJyYXJpZXM6IGBwa2cgaW5mbyAtYkIg cGtnbmFtZWANCg0KVHlwaWNhbGx5IHRoaXMgd2lsbCBub3QgaW5jbHVkZSBhbnkgc2hhcmVk IGxpYnJhcnkgZGVwZW5kZW5jaWVzIG9uIHRoZSANCmJhc2Ugc3lzdGVtIChzbyBub3QgZW50 aXJlbHkgZm9vbHByb29mKSBidXQgYW55IHBhY2thZ2Ugb25seSBsaW5raW5nIA0KYWdhaW5z dCB0aGUgYmFzZSBzeXN0ZW0gc2hsaWJzIGFuZCBub3QgcHJvdmlkaW5nIHNobGlicyBmb3Ig YW55dGhpbmcgDQplbHNlIHRvIGxpbmsgYWdhaW5zdCBpcyBlZmZlY3RpdmVseSBhIGxlYWYg cGFja2FnZSBpbiB0aGlzIHJlc3BlY3QsIGFuZCANCmNhbiBiZSB1cGRhdGVkIGluZGVwZW5k ZW50IG9mIGFueXRoaW5nIGVsc2UuDQoNCkxvb2sgb3V0IGZvciBjb21waWxlZCBkeW5hbWlj YWxseSBsb2FkZWQgbW9kdWxlcyB0b28gLS0gdGhpbmdzIGxpa2UgDQphcGFjaGUgb3Igbmdp bnggbW9kdWxlcywgd3JhcHBlcnMgZm9yIHNoYXJlZCBsaWJyYXJpZXMgdG8gbWFrZSB0aGVt IA0KYXZhaWxhYmxlIGluIG90aGVyIGxhbmd1YWdlcyBhbmQgc28gZm9ydGguICAoZWcuIFB5 dGhvbiBtb2R1bGVzIHRoYXQgYXJlIA0Kbm90IGFyY2hpdGVjdHVyZSBpbmRlcGVuZGVudC4p DQoNCkFueXRoaW5nIHJlbWFpbmluZyBhZnRlciBhcHBseWluZyB0aG9zZSBmaWx0ZXJzIGlz IGdvaW5nIHRvIHJlcXVpcmUgbW9yZSANCmNhcmUgdG8gdXBkYXRlIHNtb290aGx5LiAgSXQn cyBnb2luZyB0byBiZSBxdWl0ZSBhIGxhYm9yaW91cyB0YXNrIHRvIA0KY2xhc3NpZnkgYWxs IG9mIHlvdXIgMTYwMCBwb3J0cyBhbmQgbWFwIG91dCB3aGF0IGRlcGVuZHMgb24gd2hhdCBh bmQgDQp3aGF0IGdyb3VwcyBvZiBwYWNrYWdlcyB3b3VsZCBuZWVkIHRvIGJlIHJlaW5zdGFs bGVkIGluIHN5bmNocm9ueS4gDQpXaGV0aGVyIGl0J3Mgd29ydGggaXQgY29tcGFyZWQgdG8g anVzdCB0aHJvd2luZyBDUFUtY3ljbGVzIGF0IHRoZSANCnByb2JsZW0gYW5kIHJlYnVpbGRp bmcgZXZlcnl0aGluZyBzdHJhaWdodCBvZmYgaXMgbm90IG9idmlvdXMgdG8gbWUuDQoNClJ1 bm5pbmcgYSBtaXhlZCBzZXQgb2YgcGFja2FnZXMgZnJvbSBkaWZmZXJlbnQgbWFqb3IgT1Mg dmVyc2lvbnMgd2lsbCANCnJ1biB0aGUgcmlzayBvZiBzb2Z0d2FyZSBwYWNrYWdlcyBhcmJp dHJhcmlseSBjcmFzaGluZyB3aXRoIGNvbnNlcXVlbnQgDQpsb3NzIG9mIGZ1bmN0aW9uYWxp dHkgYW5kIHBvdGVudGlhbCBzeXN0ZW0gZG93bnRpbWUuICBHb29kIGx1Y2suDQoNCk5vdGUg dGhhdCBpZiB5b3UncmUgdXNpbmcgcG91ZHJpZXJlIHRvIGJ1aWxkIHBhY2thZ2VzLCB1cGRh dGluZyBhIA0KcG91ZHJpZXJlLWphaWwgdG8gMTQtU1RBQkxFIHdpbGwgYXV0b21hdGljYWxs eSB0cmlnZ2VyIGEgZnVsbCByZWJ1aWxkIG9mIA0KYWxsIHBhY2thZ2VzLCBwcmVjaXNlbHkg d2hhdCB5b3Ugd2FudCB0byBhdm9pZC4NCg0KCUNoZWVycywNCg0KCU1hdHRoZXcNCg0K --------------B4NVuAGmeI8DIX7epkpQ4IXk-- --------------MNtOa4Pzrh3028vgnHLpJCxG Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEEGfFU7L8RLlBUTj8wAFE/EOCp5OcFAmRfmLcFAwAAAAAACgkQAFE/EOCp5Ofh Sw//UwmHlITEPTJksLumasE8rdt/zXWmltUlrgBcNgMZ40USdr5UJWf+HhKu9mnqZA2rEbX4Yqux imqrxFRl6hk/ZpR9R2bjyi3DoIqN31eCOS0uroxsr8UIhF0mXcYoTF2mr/vosl5PbM/JsuPHPi6f 97zQwFQKEWoci7ztqLxKJ5oZvsRcOUveOEeH8BQ96hBguX914fNI0aHRAZ3lXmD2ayvCIZ7tdU3j geoE9ahPOEF4CwgwTpJofvZ0HiW1a8hbG+kP7FMTShaOBLxEhtZkE8CFV8o4YTw8NXY6ZWleJ5KE 3ofzKOvj/ogPdxLDeJ+m5QyktbpgHUvftMmJCeEsW34EJg/d5oKh3uIHeiacWlWreyEu7ufCBcfh FI+ofb/iKPs/73UGkxb9HEC25eiAMrCKKbimeWkJPS37MeDwUChJnDhYNHpSoGSVXJoFTDKe8Hf0 fj2o3wRmGaLvPJGXrzh8DvBSDHbs+VfD15ZyoBrGXYTMH9YnZpI+8i4QbIaLcgqAmqbzPxvHIE9l rYXXxH5nSRodaeyrXA19Ktnw2vWN33RTLFs2tSWcH+xoBlWFVFMUAYWzemM5S+RZaT9EBUG6oFQc Q+ublaSHPBsnD9d1sLrFrVnw8pCuKIaPuYnv3l9FK4SY2C20yIV+OwfzpZvZgCbxKNBQvTNYclK5 ZFg= =qxzx -----END PGP SIGNATURE----- --------------MNtOa4Pzrh3028vgnHLpJCxG-- From nobody Sat May 13 16:24:45 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QJWFZ65qYz4BXD6 for ; Sat, 13 May 2023 16:25:22 +0000 (UTC) (envelope-from xavier@groumpf.org) Received: from aragorn.amdh.fr (aragorn.groumpf.org [176.31.180.205]) by mx1.freebsd.org (Postfix) with ESMTP id 4QJWFY3Fh2z3CVM for ; Sat, 13 May 2023 16:25:21 +0000 (UTC) (envelope-from xavier@groumpf.org) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=groumpf.org header.s=dkim header.b=gBtmhBbX; spf=pass (mx1.freebsd.org: domain of xavier@groumpf.org designates 176.31.180.205 as permitted sender) smtp.mailfrom=xavier@groumpf.org; dmarc=none Received: from numenor.groumpf.org (82-64-247-11.subs.proxad.net [82.64.247.11]) by aragorn.amdh.fr (Postfix) with ESMTP id 0AE582000FF80 for ; Sat, 13 May 2023 18:25:18 +0200 (CEST) Received: from numenor.groumpf.org (localhost [127.0.0.1]) by numenor.groumpf.org (Postfix) with ESMTP id E98EF1C4FC9 for ; Sat, 13 May 2023 18:24:47 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=groumpf.org; h= content-transfer-encoding:content-type:content-type:in-reply-to :content-language:references:subject:subject:from:from :user-agent:mime-version:date:date:message-id:received:received; s=dkim; t=1683995085; x=1684859086; bh=5ZBXfkzJCCIezsITKEX9iSQ5 Gr3/FPLAx4iS9V3T0PI=; b=gBtmhBbXFP7gi/3cgP2E20Nz281sKBM3kdWbOIE5 rd5p60w96CTA5pz6zZC8W0LVnWRGYGOoyrIJHbOH+NA2n4NaYeSs9THlKYCOV/Gc d6rwKhDdW4mQj9Dy9sWZD7X9zJDJcHqr0XUh9eGurpLUK//aGkZjgcizYVWXLZnC zPZayG8/GnWCAjhUoYrjipIC2PM5hQ7v8yfrUxNa1N5Yi933MmFtk6vLaCulW0xV 8BWM+kI6zGscVmbfl30jrxfodVadyLuTF1yFjAid13aQi7F1C3rULXXHaj63wTBJ BE47pvOkJCv1AH6AsesKXJCJdTMIvYBb30bO/Y/2KUAXxsH+jqvw7a/YfMgMya3t aOOb7CSzheSyV7mEIj0fcqOn3F9iQuT+RnXywLODy2G5ejrHU+FzoByCMeaq21LS kXtM0I2Nphh851Y8kvdfjnVYaeITQKc0/+zNjN1V9DO0j/FqPeuJqfmOphvP65K5 tbGtg5vQmurjI0vOfTwImGCl50BgRDm3pRTp0f1h3jUnItJf7SMFs67iQ8lnTjL1 IHN1Oew5Rsyiri/a/W3vDaw1Gq0JQUsH4gd/qbRiIDTWEONYLUsdh7UPeLy/reZ4 j54ia2U5gr3GmGvHIFtbUoBXPh+TSW0WZcUYMkbol3t1JWJDiTAvGlbVgd71RCjt GAY= Received: from numenor.groumpf.org ([127.0.0.1]) by numenor.groumpf.org (ns3.groumpf.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id BLEWvqnawL7m for ; Sat, 13 May 2023 18:24:45 +0200 (CEST) Received: from [192.168.100.30] (imladris.groumpf.org [192.168.100.30]) by numenor.groumpf.org (Postfix) with ESMTPSA id D7E941C4FC8 for ; Sat, 13 May 2023 18:24:45 +0200 (CEST) Message-ID: Date: Sat, 13 May 2023 18:24:45 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: Xavier Humbert Subject: Re: How to determine ports affected by ABI change To: ports@freebsd.org References: <6162831e-19d8-42be-dee2-4263bd69a0a6@groumpf.org> <988465e8-3793-2829-590c-1207f60422df@FreeBSD.org> Content-Language: fr In-Reply-To: <988465e8-3793-2829-590c-1207f60422df@FreeBSD.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spamd-Result: default: False [-3.35 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.96)[-0.958]; R_SPF_ALLOW(-0.20)[+ip4:176.31.180.205]; R_DKIM_ALLOW(-0.20)[groumpf.org:s=dkim]; RCVD_NO_TLS_LAST(0.10)[]; MIME_GOOD(-0.10)[text/plain]; XM_UA_NO_VERSION(0.01)[]; DKIM_TRACE(0.00)[groumpf.org:+]; RCVD_VIA_SMTP_AUTH(0.00)[]; MLMMJ_DEST(0.00)[ports@freebsd.org]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; DMARC_NA(0.00)[groumpf.org]; RCPT_COUNT_ONE(0.00)[1]; TO_DN_NONE(0.00)[]; RCVD_COUNT_FIVE(0.00)[5]; ARC_NA(0.00)[]; ASN(0.00)[asn:16276, ipnet:176.31.0.0/16, country:FR]; FROM_HAS_DN(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[ports@freebsd.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Queue-Id: 4QJWFY3Fh2z3CVM X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N Le 5/13/23 16:03, Matthew Seaman a écrit : > On 13/05/2023 13:43, Xavier Humbert wrote: >> I'm planning in a few days, as soon as it beeen branched, to upgrade >> base from 13-STABLE to 14-STABLE >> >> I'm trying to avoid to rebuild my > 1600 ports. >> >> Is there a wayto determine ports affected by the ABI change, which >> must be recompiled ? Obviously Pure Perl or Pure Pyhton don't need to. >> > > Since libc and other shared libraries in the FreeBSD base system use > API versioning, almost all of your ports will continue to function on > 14-STABLE.  There will also be a misc/compat13x port to provide > compatibility for any non-versioned system shared libraries, which you > should install as part of upgrading your base system. > > So, no need to rebuild everything immediately.  With the obvious > exception of any loadable kernel modules which will definitely need to > be updated to operate with the new 14-STABLE kernel. > > However, as soon as you start updating ports on your new 14-STABLE > system, this can change and simultaneous re-installation of several > pkgs be required.  That's generally a consequence of something being > linked against a different API version somewhere in a dependency > chain, which may require the whole dependency chain involved to be > updated at the same time. > > Obviously, as you correctly observe, that only applies to software > compiled down into machine code and linked by the system loader, ld.so > -- statically linked binaries, interpreted languages (shell) or pure > byte-compiled language modules (python, perl, lua, java) won't be > affected.  Although the interpreters for any of those languages could > well be, as would any modules built around loadable shared objects. > > In terms of packages, the things to look for are: > >  (1) architecture independence: `pkg query -a '%n-%v %q' | grep -F '*'` > > Although the ABI string built into the package will say eg. > `FreeBSD:13:*` indicating a specific major version of the OS, such > packages probably _don't_ need to be recompiled for an OS major verson > change. > >  (2) Of the architecture dependent packages, check for those requiring > or providing shared libraries: `pkg info -bB pkgname` > > Typically this will not include any shared library dependencies on the > base system (so not entirely foolproof) but any package only linking > against the base system shlibs and not providing shlibs for anything > else to link against is effectively a leaf package in this respect, > and can be updated independent of anything else. > > Look out for compiled dynamically loaded modules too -- things like > apache or nginx modules, wrappers for shared libraries to make them > available in other languages and so forth.  (eg. Python modules that > are not architecture independent.) > > Anything remaining after applying those filters is going to require > more care to update smoothly.  It's going to be quite a laborious task > to classify all of your 1600 ports and map out what depends on what > and what groups of packages would need to be reinstalled in synchrony. > Whether it's worth it compared to just throwing CPU-cycles at the > problem and rebuilding everything straight off is not obvious to me. > > Running a mixed set of packages from different major OS versions will > run the risk of software packages arbitrarily crashing with consequent > loss of functionality and potential system downtime. Good luck. > > Note that if you're using poudriere to build packages, updating a > poudriere-jail to 14-STABLE will automatically trigger a full rebuild > of all packages, precisely what you want to avoid. > >     Cheers, > >     Matthew > Many thanks for this very detailed answer ! Cheers, Xavier -- Xavier HUMBERT - Unix/Win/MacOSX Sysadmin/Network Engineer https://www.amdh.fr From nobody Sat May 13 21:52:54 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QJfWW0YCHz4Bptm for ; Sat, 13 May 2023 21:52:55 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QJfWV5km9z44KL for ; Sat, 13 May 2023 21:52:54 +0000 (UTC) (envelope-from portscout@FreeBSD.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684014774; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=n9rVcJ+5CPWLY67EhL7CPsAkGh1GpIbeEy6Gt3sXraY=; b=ncdB4KlwxwSqHXJu8dpF8O8tXBJ3OlkC3IvSH3z8phHiSNmR7AXJMx1lMIm7Npp95zFuWv QvOM3YXw6nGe5KPQmR4THXYxEUZnpR0SWqiH+8xsx58LqB/YoB+/PMcNlQn+GqzfMpVNv+ R2MKitympqxRNAsji9qlQIdigpKfilW6dbP8LA2Jctn5L0tIY/VBud1nhNADW4DDzvPIai 4IRrZGd/brboE0ge24ztyNZ14eOt+kbMa+iURs4uSwwRVudxgtRiaQg5aNTzBYbGPYIwRH X7HCVjpxiGTSwq9V2nfbEbbYRaHsSpSDwMRs9euyjwpu6TtzpTonVvLyCwBZgQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684014774; a=rsa-sha256; cv=none; b=aZcsikSEg05p7gc20H+XMhOA+0F+wo97erEUCUns1UuuUIzdZm9KBG/TdHex8GQqRplQVU cqNujUdIVbLTaszVgrhQpUQf8z6XXhf9QSRricmC1yT7uQ3/kKfhXZljym7cCVMG7A16is 9kMEYzSF38BUbs9c0l5DEde/YCAEMICKL/WVwHrkshK2ilE4rNOpi9HbiP2GoBt/Q1vW7R GIvipRXZqtGRBqR4nXwfAamVY4zNTDWfOU+0WCNLDbnAyisewV0kDFIdkENAPkDO1IQlHe G9q4BRr1SZb/6mACerlc4UYuwiYDkUk/ykSlW9N9kcdQWvVg1k3Zcbq5Qb90mA== Received: from portscout.nyi.freebsd.org (portscout.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QJfWV4800zYCb for ; Sat, 13 May 2023 21:52:54 +0000 (UTC) (envelope-from portscout@FreeBSD.org) Received: from portscout.nyi.freebsd.org ([127.0.1.10]) by portscout.nyi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34DLqsdK086173 for ; Sat, 13 May 2023 21:52:54 GMT (envelope-from portscout@FreeBSD.org) Received: (from portscout@localhost) by portscout.nyi.freebsd.org (8.15.2/8.15.2/Submit) id 34DLqsLC086172; Sat, 13 May 2023 21:52:54 GMT (envelope-from portscout@FreeBSD.org) Message-Id: <202305132152.34DLqsLC086172@portscout.nyi.freebsd.org> X-Authentication-Warning: portscout.nyi.freebsd.org: portscout set sender to portscout@FreeBSD.org using -f Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Date: Sat, 13 May 2023 21:52:54 +0000 From: portscout@FreeBSD.org To: ports@freebsd.org Subject: Unmaintained FreeBSD ports which are out of date X-Mailer: portscout/0.8.1 X-ThisMailContainsUnwantedMimeParts: N Dear port maintainers, The portscout new distfile checker has detected that one or more unmaintained ports appears to be out of date. Please take the opportunity to check each of the ports listed below, and if possible and appropriate, submit/commit an update. Please consider also adopting this port. If any ports have already been updated, you can safely ignore the entry. An e-mail will not be sent again for any of the port/version combinations below. Full details can be found at the following URL: http://portscout.freebsd.org/ports@freebsd.org.html Port | Current version | New version ------------------------------------------------+-----------------+------------ cad/ifcopenshell | 0.6.0 | blenderbim-230513 ------------------------------------------------+-----------------+------------ If any of the above results are invalid, please check the following page for details on how to improve portscout's detection and selection of distfiles on a per-port basis: http://portscout.freebsd.org/info/portscout-portconfig.txt Reported by: portscout!