Date: Mon, 28 May 2012 18:31:52 +0100 From: Chris Rees <crees@FreeBSD.org> To: Stephen Montgomery-Smith <stephen@missouri.edu> Cc: =?ISO-8859-1?B?R+Fib3IgS/Z2ZXNk4W4=?= <gabor@t-hosting.hu>, freebsd-ports@freebsd.org Subject: Re: Request to review: print/texlive-install Message-ID: <CADLo8380zGtCETzGrKzMrD_3Fwm2bZOMpEFLupaD_=mPU5k4Jg@mail.gmail.com> In-Reply-To: <4FC3B1B9.1050703@missouri.edu> References: <CACsYpVOz1tnWO5e4S_OOSDGa7Q8OkztJ6HagHy58FY0J5RNCqQ@mail.gmail.com> <20120526090137.001691dc@scorpio> <ac8cb42c8cfedc59d2c7d6ccde74c476@anthesphoria.net> <4FC0F8EA.1090005@missouri.edu> <b532d4fdda7e4dfb99d4b4266fe7fe3c@anthesphoria.net> <4FC11B66.9000302@missouri.edu> <4b8eeb05337b220f301268ce014a159d@anthesphoria.net> <4FC2D159.4050801@missouri.edu> <CAF6rxg==b8BMsAoRaQY39StgxAQu7xCN2yt_K8mYH753nZm_7w@mail.gmail.com> <4FC387A9.5070700@missouri.edu> <4FC39E17.1060205@freebsd.org> <4FC3A4FB.1060106@missouri.edu> <4FC3A93C.6080009@t-hosting.hu> <4FC3B1B9.1050703@missouri.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On 28 May 2012 18:11, Stephen Montgomery-Smith <stephen@missouri.edu> wrote= : > On 05/28/2012 11:35 AM, G=E1bor K=F6vesd=E1n wrote: >> >> On 2012.05.28. 18:16, Stephen Montgomery-Smith wrote: >>>> >>>> >>>> >>>> On 5/28/12 10:11 AM, Stephen Montgomery-Smith wrote: >>>>> >>>>> >>>>> How about if I add lines like this: >>>>> >>>>> .if !defined(IGNORE_SECURITY_RISK) >>>>> IGNORE=3D has a security risk because it downloads a file \ >>>>> without a checksum. Define IGNORE_SECURITY_RISK to build this port >>>>> .endif >>>>> >>>>> Would it be considered OK to commit it then? >>>> >>>> could you host it somewhere that won't go away at missouri.edu? >>>> >>> >>> >>> I could host it somewhere at missouri.edu that will stay as long as I >>> am alive or keep my job. >> >> Better to host it on the FreeBSD mirrors. You only have to create a >> public_distfiles in your home directory after logging in to freefall and >> drop the file there. This is the usual way of doing it. > > > Thank you for the info. =A0Here is my latest version: > > http://people.freebsd.org/~stephen/ > I'm afraid my concerns still hold [1]. This port fetches $WHOKNOWSWHAT from $WHOKNOWSWHERE outside the fetch stage, which isn't how ports are supposed to work. I know 'having a port' is usually considered a good thing, but as I said before, it's no easier or safer to install this via the port than just download and run the script. Also, on deinstall/upgrade the port will clobber anything that was there on install (automatic plist generation also sucks in anything that was there) [2]. Chris [1] http://lists.freebsd.org/pipermail/freebsd-ports/2012-May/075236.html [2] ''' Install texlive-install. Use texlive to grab funky new package. Upgrade texlive-install /* XXX funky new package is now added to texlive-instal plist */ Upgrade texlive-install again Hey, where did $FUNKY go? '''
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CADLo8380zGtCETzGrKzMrD_3Fwm2bZOMpEFLupaD_=mPU5k4Jg>