From owner-freebsd-security  Sun Jun 30 11: 9:29 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BEA0837B401
	for <security@freebsd.org>; Sun, 30 Jun 2002 11:09:24 -0700 (PDT)
Received: from mail6.mgfairfax.rr.com (fe6.southeast.rr.com [24.93.67.53])
	by mx1.FreeBSD.org (Postfix) with ESMTP id CB9DB43E0A
	for <security@freebsd.org>; Sun, 30 Jun 2002 11:09:23 -0700 (PDT)
	(envelope-from jeffi@rcn.com)
Received: from glasshouse ([68.100.191.91]) by mail6.mgfairfax.rr.com  with Microsoft SMTPSVC(5.5.1877.757.75);
	 Sun, 30 Jun 2002 14:09:16 -0400
Message-ID: <005f01c22061$4f8814b0$f200a8c0@glasshouse>
From: "Jeff Ito" <jeffi@rcn.com>
To: <security@freebsd.org>
Cc: "Alessandro de Manzano" <adm@unixmania.net>
References: <5.1.0.14.2.20020629142257.0221e050@mail.sstec.com> <20020629170827.K5428-100000@master.gorean.org> <20020630192440.A18140@libero.sunshine.ale>
Subject: Re: named 8.3.2-T1B vulnerable?
Date: Sun, 30 Jun 2002 14:09:42 -0400
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> I've a question about replacing with PORT_REPLACES_BASE_BIND8.
> 
> If today I install BIND 8.3.3 from the port with that option it will
> overwrite the system one but next time I'll do a buildworld /
> installworld I'll get again 8.3.2-T1B or whatever RELENG_4(_6) will
> have that time.. right ?

Yes,
see /etc/make.conf to prevent this

#NO_BIND=       true    # do not build BIND


> More, I'll get an entry in the installed packages database for BIND
> 8.3.3 that is "dangerous", since if I'll ever pkg_delete it I'll lost
> the real/overwritten BIND... 
> 
> Is possible to "make install" it without making an entry in pkgdb ?
> 

pkg_add has -R,  I'm not certain about doing the same with make install,
but you can always delete the entry from /var/db/pkg/
 
 -- 
> 
> bye!
> 
> Ale
> 

HTH,
Jeff


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message