From owner-freebsd-security Wed Oct 9 12:38: 3 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 649B537B401 for ; Wed, 9 Oct 2002 12:38:01 -0700 (PDT) Received: from obsecurity.dyndns.org (adsl-64-165-226-88.dsl.lsan03.pacbell.net [64.165.226.88]) by mx1.FreeBSD.org (Postfix) with ESMTP id D784843E4A for ; Wed, 9 Oct 2002 12:38:00 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 5207C66C7B; Wed, 9 Oct 2002 12:38:00 -0700 (PDT) Date: Wed, 9 Oct 2002 12:38:00 -0700 From: Kris Kennaway To: William Carrel Cc: Erick Mechler , security@FreeBSD.ORG Subject: Re: I doubt that this affects FreeBSD, but FYI Message-ID: <20021009193800.GH84472@xor.obsecurity.org> References: <20021009170117.GJ10532@techometer.net> <486282FF-DBA9-11D6-AA28-003065479A66@infospace.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="l06SQqiZYCi8rTKz" Content-Disposition: inline In-Reply-To: <486282FF-DBA9-11D6-AA28-003065479A66@infospace.com> User-Agent: Mutt/1.4i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --l06SQqiZYCi8rTKz Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Oct 09, 2002 at 10:05:16AM -0700, William Carrel wrote: > I was talking about the base system, not ports. I guess I should've=20 > been clearer about that. I don't think the base system checks the MD5=20 > sums during buildworld. But then I have NO_SENDMAIL turned on in=20 > make.conf anyway, so what would I know. Buildworld uses the included copy of sendmail, it doesn't download an external distfile, so there is no point at which checking an md5 sum makes sense. This is also the same reason why sendmail in the base system was never affected. Kris --l06SQqiZYCi8rTKz Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQE9pIWXWry0BWjoQKURAjxAAJ9I50qE/j8oKvB2bkACi4zMnXu+PwCgy30I eLyBMTaBWSFckr0vj9vvK5w= =Hd7l -----END PGP SIGNATURE----- --l06SQqiZYCi8rTKz-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message