From owner-freebsd-ports Fri Jul 28 1:45:21 2000 Delivered-To: freebsd-ports@freebsd.org Received: from merlin.onsea.com (dyn137-ras13.screaming.net [212.49.236.137]) by hub.freebsd.org (Postfix) with ESMTP id 0D33037C00E for ; Fri, 28 Jul 2000 01:45:16 -0700 (PDT) (envelope-from dozprompt@onsea.com) Received: from localhost (dozprompt@localhost) by merlin.onsea.com (8.9.3/8.9.3) with ESMTP id JAA04527 for ; Fri, 28 Jul 2000 09:44:55 +0100 (BST) (envelope-from dozprompt@onsea.com) X-Authentication-Warning: merlin.onsea.com: dozprompt owned process doing -bs Date: Fri, 28 Jul 2000 09:44:55 +0100 (BST) From: Cliff Rowley To: freebsd-ports@freebsd.org Subject: Re: FreeBSD Port Collection (fwd) Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Sorry if this is duplicated, just wondering if you knew. Cliff Rowley The reader this message encounters not failing to understand is cursed. - while (!asleep) { code(); } ---------- Forwarded message ---------- Date: Fri, 28 Jul 2000 08:22:05 +0200 From: Gert Doering Reply-To: mgetty@muc.de To: Forrest Aldrich , mgetty@muc.de Subject: Re: FreeBSD Port Collection Hi, On Thu, Jul 27, 2000 at 07:27:22PM -0400, Forrest Aldrich wrote: > FYI, this is the status of the mgetty port in the FreeBSD port collection: > > FORBIDDEN= "Insecure tempfile handling: can overwrite any file on the > system" The FreeBSD port has always been broken... ... and they have never informed me of *anything*. I could imagine problems in some of the programs (there shouldn't, but then, with all the sample scripts, there are *so* many that it's hard to say without going through all of them). Faxspool has one minor thing (if called with "faxspool -" - read from stdin - it will create a file in /tmp unsafely, but then, just don't do this, then). The sample configuration ships with mgetty.cfg.in:# statistics-file /tmp/statistics.2864 - that would be unsafe, but it's disabled anyway per default. Well... I will change faxspool, and change the default config sample. But it still would have been nice to get a notification from the FreeBSD folks. *sigh* gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany gert@greenie.muc.de fax: +49-89-35655025 gert.doering@physik.tu-muenchen.de To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message