Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 May 2012 17:37:13 +0100
From:      Chris Rees <utisoft@gmail.com>
To:        Stephen Montgomery-Smith <stephen@missouri.edu>
Cc:        freebsd-ports@freebsd.org
Subject:   Re: Request to review: print/texlive-install
Message-ID:  <CADLo83-syVa5zjPkt%2B1cL-oH%2BX7ZUuEhws2RH1Ab9Q94mH9CUw@mail.gmail.com>
In-Reply-To: <4FC3A4FB.1060106@missouri.edu>
References:  <CACsYpVOz1tnWO5e4S_OOSDGa7Q8OkztJ6HagHy58FY0J5RNCqQ@mail.gmail.com> <20120526090137.001691dc@scorpio> <ac8cb42c8cfedc59d2c7d6ccde74c476@anthesphoria.net> <4FC0F8EA.1090005@missouri.edu> <b532d4fdda7e4dfb99d4b4266fe7fe3c@anthesphoria.net> <4FC11B66.9000302@missouri.edu> <4b8eeb05337b220f301268ce014a159d@anthesphoria.net> <4FC2D159.4050801@missouri.edu> <CAF6rxg==b8BMsAoRaQY39StgxAQu7xCN2yt_K8mYH753nZm_7w@mail.gmail.com> <4FC387A9.5070700@missouri.edu> <4FC39E17.1060205@freebsd.org> <4FC3A4FB.1060106@missouri.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On May 28, 2012 5:23 PM, "Stephen Montgomery-Smith" <stephen@missouri.edu>
wrote:
>
> On 05/28/2012 10:47 AM, Michael Scheidell wrote:
>>
>>
>>
>> On 5/28/12 10:11 AM, Stephen Montgomery-Smith wrote:
>>>
>>>
>>> How about if I add lines like this:
>>>
>>> .if !defined(IGNORE_SECURITY_RISK)
>>> IGNORE= has a security risk because it downloads a file \
>>> without a checksum. Define IGNORE_SECURITY_RISK to build this port
>>> .endif
>>>
>>> Would it be considered OK to commit it then?
>>
>> could you host it somewhere that won't go away at missouri.edu?
>>
>
>
> I could host it somewhere at missouri.edu that will stay as long as I am
alive or keep my job.
>

The main problem is the fetching of random files during build-- that is an
issue faced by many ports.

This is not generally allowed to happen, since these files are not verified
either.  What needs to happen is for the port to fetch all necessary files
in the do-fetch stage.

Unfortunately this makes it more complicated, but otherwise our users are
simply better off fetching and installing the files themselves; the port
makes it no easier.

Chris



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CADLo83-syVa5zjPkt%2B1cL-oH%2BX7ZUuEhws2RH1Ab9Q94mH9CUw>