From owner-cvs-ports@FreeBSD.ORG  Tue Feb 17 05:09:15 2004
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
Delivered-To: cvs-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id DC34716A4CE; Tue, 17 Feb 2004 05:09:15 -0800 (PST)
Received: from smtp.des.no (flood.des.no [217.116.83.31])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id AC5BC43D1D; Tue, 17 Feb 2004 05:09:15 -0800 (PST)
	(envelope-from des@des.no)
Received: by smtp.des.no (Pony Express, from userid 666)
	id 755BA5309; Tue, 17 Feb 2004 14:09:14 +0100 (CET)
Received: from dwp.des.no (des.no [80.203.228.37])
	by smtp.des.no (Pony Express) with ESMTP
	id F27B25308; Tue, 17 Feb 2004 14:09:06 +0100 (CET)
Received: by dwp.des.no (Postfix, from userid 2602)
	id 8037533C68; Tue, 17 Feb 2004 14:09:06 +0100 (CET)
To: Michael Nottebrock <michaelnottebrock@gmx.net>
References: <200402091336.i19Da8nQ019809@repoman.freebsd.org>
	<20040209220732.GA22475@xor.obsecurity.org>
	<20040217124914.GA16805@xor.obsecurity.org>
	<200402171404.30701.michaelnottebrock@gmx.net>
From: des@des.no (Dag-Erling =?iso-8859-1?q?Sm=F8rgrav?=)
Date: Tue, 17 Feb 2004 14:09:06 +0100
In-Reply-To: <200402171404.30701.michaelnottebrock@gmx.net> (Michael
 Nottebrock's message of "Tue, 17 Feb 2004 14:04:23 +0100")
Message-ID: <xzpr7wtn98t.fsf@dwp.des.no>
User-Agent: Gnus/5.090024 (Oort Gnus v0.24) Emacs/21.3 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on flood.des.no
X-Spam-Level: 
X-Spam-Status: No, hits=0.0 required=5.0 tests=AWL autolearn=no version=2.63
cc: cvs-ports@FreeBSD.org
cc: ports-committers@FreeBSD.org
cc: Michael Nottebrock <lofi@FreeBSD.org>
cc: cvs-all@FreeBSD.org
cc: Kris Kennaway <kris@obsecurity.org>
Subject: Re: cvs commit: ports/devel/tmake Makefile distinfo
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Feb 2004 13:09:16 -0000

Michael Nottebrock <michaelnottebrock@gmx.net> writes:
> On Tuesday 17 February 2004 13:49, Kris Kennaway wrote:
> > On Mon, Feb 09, 2004 at 02:07:32PM -0800, Kris Kennaway wrote:
> > > On Mon, Feb 09, 2004 at 05:36:08AM -0800, Michael Nottebrock wrote:
> > > >   Log:
> > > >   Fix distinfo, SIZEify.
> > > You forgot to summarize what changed.
> > I didn't see a followup to this.
> I have no idea what you expect me to write.

When the checksum of a distfile changes, there is a considerable risk
that someone may have trojaned the distfile.  As a port maintainer,
you are exptected to verify that this is not the case before updating
the checksum in distinfo.  You are also expected to summarize the
reason for the changed checksum in the commit message so that The Rest
Of Us[tm] can rest assured that you have indeed verified that the
distfile was not trojaned.

DES
--=20
Dag-Erling Sm=F8rgrav - des@des.no