From owner-freebsd-ports@FreeBSD.ORG Sun Jul 8 09:31:32 2012 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id B772C1065675 for ; Sun, 8 Jul 2012 09:31:32 +0000 (UTC) (envelope-from utisoft@gmail.com) Received: from mail-bk0-f54.google.com (mail-bk0-f54.google.com [209.85.214.54]) by mx1.freebsd.org (Postfix) with ESMTP id 428DD8FC0A for ; Sun, 8 Jul 2012 09:31:32 +0000 (UTC) Received: by bkcje9 with SMTP id je9so4794492bkc.13 for ; Sun, 08 Jul 2012 02:31:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; bh=jtrZp4aQg1z7yENNsPxR1uLfgEL7QgWMY96IBBRW63c=; b=XZ67PGSc4xrkIvSsyL8Dvpi2Jdy+qaE+5SycKKl5SZ6AF8YrrQ9DZSnRyT0idd5gF5 oqN4GBc6W0tKENABK87sXBzN7TGkLOrNQ4jqaFuNdAbMpCD8NeFMEugXutTAGw2M8kXX u/6hQhT3VNZjMWUuW6R8egKPJIxi+5Mr66CWGocrJBszReu46qySGAVEqZTSYhX3AMO8 1fjQycZrq+uZ+DrSTj3vZ1YFdhKeUQruSiqT3HcurD23q7kblSjyu4kEl6TgisyM0c7k Pmrn8LVHHOb7fUMhp/p/Yn9djeEKrb6RhhOuAdU+gmiIDhYipjeZyDEEWUScsbCJ1maO yV6g== Received: by 10.205.133.11 with SMTP id hw11mr3616856bkc.46.1341739891270; Sun, 08 Jul 2012 02:31:31 -0700 (PDT) MIME-Version: 1.0 Sender: utisoft@gmail.com Received: by 10.204.49.87 with HTTP; Sun, 8 Jul 2012 02:30:59 -0700 (PDT) In-Reply-To: <4FF94DA3.4010605@uclive.ac.nz> References: <4FF949E8.6050606@uclive.ac.nz> <4FF94DA3.4010605@uclive.ac.nz> From: Chris Rees Date: Sun, 8 Jul 2012 10:30:59 +0100 X-Google-Sender-Auth: Z1WQpJMJgXbSeGAQxKZncvjzS9Y Message-ID: To: Benjamin Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-ports@freebsd.org Subject: Re: Port installs a lot of security risks. X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Jul 2012 09:31:32 -0000 On 8 July 2012 10:06, Benjamin wrote: > hmmm, I searched for the warning - it doesn't seem common (according to > google). I assume this is bad. >> >> "This port has installed the following world-writable files/directories." >> >> What does this message mean? > It means that some of the files that it has installed are permission ugo+w. This may or may not be a problem-- would you care if any random user edited these? I mean ANY user! Chris