From owner-freebsd-ports Fri Sep 13 11:44:10 2002 Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4EE6637B400; Fri, 13 Sep 2002 11:44:05 -0700 (PDT) Received: from obsecurity.dyndns.org (adsl-64-165-226-88.dsl.lsan03.pacbell.net [64.165.226.88]) by mx1.FreeBSD.org (Postfix) with ESMTP id B613043E65; Fri, 13 Sep 2002 11:44:04 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 2659C66C26; Fri, 13 Sep 2002 11:44:04 -0700 (PDT) Date: Fri, 13 Sep 2002 11:44:03 -0700 From: Kris Kennaway To: Joe Marcus Clarke Cc: alane@geeksrus.net, FreeBSD Ports List , FreeBSD Gnome Team Subject: Re: fork bombs registering packages using GNOMENG Message-ID: <20020913184403.GC47536@xor.obsecurity.org> References: <20020913173752.GA53609@wwweasel.geeksrus.net> <1031939300.657.31.camel@gyros.marcuscom.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="U+BazGySraz5kW0T" Content-Disposition: inline In-Reply-To: <1031939300.657.31.camel@gyros.marcuscom.com> User-Agent: Mutt/1.4i Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --U+BazGySraz5kW0T Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Sep 13, 2002 at 01:48:20PM -0400, Joe Marcus Clarke wrote: > On Fri, 2002-09-13 at 13:37, Alan E wrote: > > I've noticed a distressing trend in ports which use the GNOMENG > > configuration interface. If you set USE_GNOME on the make command line, > > the port is likely to fork makes until it can't fork anymore - each one > > forks a child, which forks a child, which ... up to thousands of them. > >=20 > > For example, irc/xchat: "make USE_GNOME=3Dgtk12 package" will fork bomb > > during the registering package phase of the post-installation code. >=20 > Why are you doing this? This is wrong. You should never specify USE_* > on the make command line. If you're trying to enforce GNOME dependence, > use: >=20 > make -DWITH_GNOME package You're correct that this is clearly wrong, but I've seen a lot of people making this mistake. Is there anything we can do to prevent people setting the internal variables (HAVE_*, WANT_*, USE_*) externally? Kris --U+BazGySraz5kW0T Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQE9gjHzWry0BWjoQKURAjnjAJ9Ff/wUfaa60MLk9FVEDb+RtRZWUACfc+17 21xS+tn3sK4NehOxCZEdl7w= =npre -----END PGP SIGNATURE----- --U+BazGySraz5kW0T-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message