From owner-freebsd-ports Sun Jan 24 23:48:27 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA05143 for freebsd-ports-outgoing; Sun, 24 Jan 1999 23:48:27 -0800 (PST) (envelope-from owner-freebsd-ports@FreeBSD.ORG) Received: from adelphi.physics.adelaide.edu.au (adelphi.physics.adelaide.edu.au [129.127.36.247]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA05135 for ; Sun, 24 Jan 1999 23:48:24 -0800 (PST) (envelope-from kkennawa@physics.adelaide.edu.au) Received: from bragg (bragg [129.127.36.34]) by adelphi.physics.adelaide.edu.au (8.8.8/8.8.8/UofA-1.5) with SMTP id SAA29876; Mon, 25 Jan 1999 18:18:21 +1030 (CST) Received: from localhost by bragg; (5.65/1.1.8.2/05Aug95-0227PM) id AA00144; Mon, 25 Jan 1999 18:18:20 +1030 Date: Mon, 25 Jan 1999 18:18:20 +1030 (CST) From: Kris Kennaway X-Sender: kkennawa@bragg To: John Polstra Cc: mph@pobox.com, ports@FreeBSD.ORG Subject: Re: tcp wrappers In-Reply-To: <199901250157.RAA18135@vashon.polstra.com> Message-Id: Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sun, 24 Jan 1999, John Polstra wrote: > In article <19990124151456.A218@wopr.caltech.edu>, > Matthew Hunt wrote: > > On Mon, Jan 25, 1999 at 09:30:09AM +1100, Sue Blake wrote: > > > > > A CERT advisory just came through which seems to require distifles to > > > be collected from a safer location > > > http://www.cert.org/advisories/CA-99-01-Trojan-TCP-Wrappers.html > > > > That's why we record the MD5 checksum of the distfiles. > > That might help, except for a little cultural problem we have. Every > time a checksum for some port comes up bad, somebody blindly commits > the new checksum with a message that says "Checksum changed on master > site." :-) That's a very good point - perhaps people will be a little bit less trusting now that this little incident has proven what could happen :) Kris ----- (ASP) Microsoft Corporation (MSFT) announced today that the release of its productivity suite, Office 2000, will be delayed until the first quarter of 1901. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message