Date: Thu, 2 Sep 2004 07:37:22 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: messmate <messmate@free.fr> Cc: freebsd-questions-en <freebsd-questions@freebsd.org> Subject: Re: parts of ports Message-ID: <20040902063722.GA18819@happy-idiot-talk.infracaninophile.co.uk> In-Reply-To: <20040901232125.3b741b9c@eric.placeverte.home> References: <20040901153209.4064d9e8@eric.placeverte.home> <4135E2E7.6050607@bah.homeip.net> <20040901235151.8496.LUKEK@meibin.net> <20040901232125.3b741b9c@eric.placeverte.home>
next in thread | previous in thread | raw e-mail | index | archive | help
--J/dobhs11T7y2rNN
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Wed, Sep 01, 2004 at 11:21:25PM +0200, messmate wrote:
> On Wed, 01 Sep 2004 23:54:10 +0900
> Luke Kearney <lukek@meibin.net> wrote:
>=20
> >
> >On Wed, 01 Sep 2004 16:55:35 +0200
> >"B.Hansson" <bernt@bah.homeip.net> spake thus:
> >> messmate skrev:
> >> > is there a way to install only parts of the ports tree to set=20
> >> > them up ? The ports tree takes 237M up :(
> >> Yes. tar -zxvf ports.tar.gz path/to/port/you/want/to/install
> >> That's how I did it. See to it that you have Mk, Templates and such=20
> >> directorys in your /usr/ports dir.
> Why is it so insecure have the ports installed ?
> When downloading (cvs) i presume ?
In general it's not particularly insecure to have the ports tree, or
bits of it, installed. However the OP was talking about building a
highly secure firewall type system. The idea is to avoid giving an
attacker a really handy way of installing any extra software they
might want. Not that is makes a huge amount of difference, as when an
attacker has achieved that degree of control over the machine,
basically all is already lost. Presumably they'll just upload whatever
packages they want.
In the end, it's a matter of personal preference and the availability
of disk space whether you install the ports or not.
Cheers,
Matthew
--=20
Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks
Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614 Bucks., SL7 1TH UK
--J/dobhs11T7y2rNN
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)
iD8DBQFBNr+iiD657aJF7eIRAoaUAJ9XRc9VwEDXsCWqn8+LZt/tpm0jTACdFyhq
vwuu9qKnSAeno9PVtZ4rZZk=
=6VKA
-----END PGP SIGNATURE-----
--J/dobhs11T7y2rNN--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040902063722.GA18819>