Date: 3 Dec 2002 02:56:35 -0000 From: 605a1a9724ecc52ffc11dd6da4d8f665 <605a1a9724ecc52ffc11dd6da4d8f665@tessellated.net> To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/45948: Porter's Handbook doesn't address security issues Message-ID: <20021203025635.53912.qmail@hyperreal.net>
next in thread | raw e-mail | index | archive | help
>Number: 45948
>Category: ports
>Synopsis: Porter's Handbook doesn't address security issues
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: doc-bug
>Submitter-Id: current-users
>Arrival-Date: Mon Dec 02 19:00:01 PST 2002
>Closed-Date:
>Last-Modified:
>Originator: 605a1a9724ecc52ffc11dd6da4d8f665
>Release: FreeBSD 4.7-STABLE i386
>Organization:
>Environment:
System: FreeBSD system 4.7-STABLE FreeBSD 4.7-STABLE #0: Wed Nov 13 20:04:26 EST 2002 605a1a9724ecc52ffc11dd6da4d8f665@system:/usr/obj/usr/src/sys/SYSTEM i386
>Description:
After chatting with portmgr@ I've come up with the attached patch. kris has suggested some ideas for expanding "security" to an independent section, so I'll try to generate a lengthier "security for porters" patch as time permits.
>How-To-Repeat:
>Fix:
diff -ruN porters-handbook.orig/book.sgml porters-handbook/book.sgml
--- porters-handbook.orig/book.sgml Fri Nov 29 15:37:36 2002
+++ porters-handbook/book.sgml Fri Nov 29 16:08:06 2002
@@ -3954,6 +3954,10 @@
doing a commit. If the diff is more than about 20KB, please compress
and uuencode it; otherwise, just include it in the PR as is.</para>
+ <important>
+ <para>If your upgrade is motivated by security concerns or a major regression in the currently committed port, please notify the Package Builders <email>portmgr@FreeBSD.org</email> to request immediate rebuilding and redistribution of your port's package. Unsuspecting users of &man.pkg_add.1; will otherwise continue to install the old version via <command>pkg_add -r</command> for several weeks.</para>
+ </important>
+
<note>
<para>Once again, please use &man.diff.1; and not &man.shar.1; to send
updates to existing ports!</para>
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021203025635.53912.qmail>