From nobody Wed Nov 16 00:51:22 2022
X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NBky94SD9z4fp76
	for <freebsd-ports@mlmmj.nyi.freebsd.org>; Wed, 16 Nov 2022 00:51:29 +0000 (UTC)
	(envelope-from verm@darkbeer.org)
Received: from mx.coeval.ca (mx.coeval.ca [184.75.211.21])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client did not present a certificate)
	by mx1.freebsd.org (Postfix) with ESMTPS id 4NBky84Wfnz3lXl
	for <freebsd-ports@freebsd.org>; Wed, 16 Nov 2022 00:51:28 +0000 (UTC)
	(envelope-from verm@darkbeer.org)
Authentication-Results: mx1.freebsd.org;
	dkim=pass header.d=darkbeer.org header.s=mail header.b=mfgz3iZs;
	spf=pass (mx1.freebsd.org: domain of verm@darkbeer.org designates 184.75.211.21 as permitted sender) smtp.mailfrom=verm@darkbeer.org;
	dmarc=none
Received: from mx.darkbeer.org (unknown [192.168.211.20])
	by mx.coeval.ca (Postfix) with ESMTP id 1B72E43605C
	for <freebsd-ports@freebsd.org>; Wed, 16 Nov 2022 00:51:22 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=darkbeer.org; s=mail;
	t=1668559882; bh=3VZGCfEIlL+Xy66eeZYysHmtiMmFgzzUaxKBGpzdRNE=;
	h=Date:From:To:Subject:References:In-Reply-To;
	b=mfgz3iZs+V2roD0bt6Tsr8dj3qGbRwVlkiroNIxOkA7hnY2kiaimhcyfznYlsI7h1
	 pc8mY0ghTfGp4ar9pjruPWMu54u5LHz2K8V245bFr8S3hLdg2l5cklSJus5EWH1nLu
	 FZxQ77L4b26RvczExpdy1q4HkdozXg3yLYK++1CQ=
Received: by mx.darkbeer.org (Postfix, from userid 1001)
	id 16567470BFC; Wed, 16 Nov 2022 00:51:22 +0000 (UTC)
Date: Wed, 16 Nov 2022 00:51:22 +0000
From: Amar Takhar <verm@darkbeer.org>
To: freebsd-ports@freebsd.org
Subject: Re: Some ports uses git while make configure to load deps
Message-ID: <20221116005122.GA69273@darkbeer.org>
Mail-Followup-To: freebsd-ports@freebsd.org
References: <20221116021440.4da2a3e5@rimwks.local>
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-ports
List-Help: <mailto:ports+help@freebsd.org>
List-Post: <mailto:ports@freebsd.org>
List-Subscribe: <mailto:ports+subscribe@freebsd.org>
List-Unsubscribe: <mailto:ports+unsubscribe@freebsd.org>
Sender: owner-freebsd-ports@freebsd.org
X-BeenThere: freebsd-ports@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20221116021440.4da2a3e5@rimwks.local>
X-Spamd-Result: default: False [-2.48 / 15.00];
	NEURAL_HAM_MEDIUM(-1.00)[-1.000];
	NEURAL_HAM_SHORT(-0.98)[-0.978];
	R_DKIM_ALLOW(-0.20)[darkbeer.org:s=mail];
	R_SPF_ALLOW(-0.20)[+ip4:184.75.211.21];
	MIME_GOOD(-0.10)[text/plain];
	FROM_EQ_ENVFROM(0.00)[];
	MLMMJ_DEST(0.00)[freebsd-ports@freebsd.org];
	ARC_NA(0.00)[];
	RCVD_TLS_LAST(0.00)[];
	DKIM_TRACE(0.00)[darkbeer.org:+];
	MIME_TRACE(0.00)[0:+];
	DMARC_NA(0.00)[darkbeer.org];
	RCPT_COUNT_ONE(0.00)[1];
	ASN(0.00)[asn:32489, ipnet:184.75.211.0/24, country:CA];
	FROM_HAS_DN(0.00)[];
	RCVD_COUNT_THREE(0.00)[3];
	TO_MATCH_ENVRCPT_ALL(0.00)[];
	TO_DN_NONE(0.00)[];
	PREVIOUSLY_DELIVERED(0.00)[freebsd-ports@freebsd.org];
	MID_RHS_MATCH_FROM(0.00)[]
X-Rspamd-Queue-Id: 4NBky84Wfnz3lXl
X-Spamd-Bar: --
X-ThisMailContainsUnwantedMimeParts: N

On 2022-11-16 02:14 +0200, Rozhuk Ivan wrote:
> Hi!
> 
> 
> I see this many times with different ports, for example: graphics/evince.
> Probably this is new meson behaviour.
<snip> 
> 
> Does it violates some ports requirements to not load anything that not covered by "make makesum"?

I would think if the port had a commit hash pinned it would be fine but.

I took a look at graphics/evince and it seems to just pull down the main branch?  
That's kind disturbing as it would not always match what the port creator tested 
when making the port.  It also makes any kind of auditing useless.


Amar.