Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 29 Nov 2002 21:37:02 -0200
From:      Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
To:        Giorgos Keramidas <keramida@FreeBSD.ORG>
Cc:        Kris Kennaway <kris@obsecurity.org>, docs@FreeBSD.ORG
Subject:   Re: [dkl@tessellated.net: Re: Providing a mechanism for port maintainers to specify an immediate package rebuild/redist to improve security response (Was Re: samba security update)]
Message-ID:  <20021129233724.25899.qmail@exxodus.fedaykin.here>
In-Reply-To: <20021129231227.GD755@gothmog.gr>
References:  <20021129222946.GA37822@rot13.obsecurity.org> <20021129231227.GD755@gothmog.gr>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Nov 30, 2002 at 01:12:05AM +0200, Giorgos Keramidas wrote:
> 
> %%%
> Index: book.sgml
> ===================================================================
> RCS file: /home/ncvs/doc/en_US.ISO8859-1/books/porters-handbook/book.sgml,v
> retrieving revision 1.256
> diff -u -r1.256 book.sgml
> - --- book.sgml	18 Nov 2002 09:32:53 -0000	1.256
> +++ book.sgml	29 Nov 2002 23:08:05 -0000
> @@ -3954,6 +3954,16 @@
>          doing a commit.  If the diff is more than about 20KB, please compress
>          and uuencode it; otherwise, just include it in the PR as is.</para>
>  
> +      <important>
> +        <para>If your upgrade is motivated by security concerns or a major
> +          regression in the currently committed port, please notify the
> +          Package Builders <email>portmgr@FreeBSD.org</email> to request
> +          immediate rebuilding and redistribution of your port's
> +          package. Unsuspecting users of &man.pkg.add.1; will otherwise
> +          continue to install the old version via <command>pkg_add
> +          -r</command> for several weeks.</para>
> +      </important>
> +
>        <note>
>          <para>Once again, please use &man.diff.1; and not &man.shar.1; to send
>            updates to existing ports!</para>


	I did a couple changes on my previous post after receiving
some feedback from Keramida. This contains both our changes

--- book.sgml.orig	Fri Nov 29 20:57:26 2002
+++ book.sgml	Fri Nov 29 21:33:28 2002
@@ -3954,6 +3954,17 @@
         doing a commit.  If the diff is more than about 20KB, please compress
         and uuencode it; otherwise, just include it in the PR as is.</para>
 
+    <important>
+      <para>If your upgrade is motivated by either security concerns
+	or a major regression in the currently committed port, please
+	notify the Package Builders &a.portmgr; to request both
+	immediate rebuilding and immediate redistribution of your
+	port's package.  Unsuspecting users of &man.pkg.add.1; will
+	otherwise continue to install the old version via
+	<command>pkg_add <option>-r</option></command> for several
+	weeks.</para>
+    </important>
+
       <note>
         <para>Once again, please use &man.diff.1; and not &man.shar.1; to send
           updates to existing ports!</para>

--

	Used the a.portmgr entity instead of hardcoding email.
Used 2 spaces after phrasal terminator. Added <option></option>
inside <command></command> context to emphasize semantical context,
the whole makes for the command but -r is an option of it.
	Also used parallelization word both where appropriate.

	If you like it, go ahead and commit since
keramida already approved it. You can add my stamp of approval as
well heheh but his is much better hehehe

-- 
Mario S F Ferreira - DF - Brazil - "I guess this is a signature."
Computer Science Undergraduate | FreeBSD Committer | CS Developer
flames to beloved devnull@someotherworldbeloworabove.org
feature, n: a documented bug | bug, n: an undocumented feature

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-doc" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021129233724.25899.qmail>