From owner-freebsd-ports@FreeBSD.ORG Fri Feb 4 09:42:06 2005 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5C7C616A4CE for ; Fri, 4 Feb 2005 09:42:06 +0000 (GMT) Received: from chilled.skew.org (skew.org [65.101.207.237]) by mx1.FreeBSD.org (Postfix) with ESMTP id 154E943D1D for ; Fri, 4 Feb 2005 09:42:06 +0000 (GMT) (envelope-from mike@skew.org) Received: from chilled.skew.org (localhost.skew.org [127.0.0.1]) by chilled.skew.org (8.13.1/8.13.1) with ESMTP id j149g60o079094 for ; Fri, 4 Feb 2005 02:42:06 -0700 (MST) (envelope-from mike@chilled.skew.org) Received: (from mike@localhost) by chilled.skew.org (8.13.1/8.13.1/Submit) id j149g60T079093 for freebsd-ports@freebsd.org; Fri, 4 Feb 2005 02:42:06 -0700 (MST) (envelope-from mike) From: Mike Brown Message-Id: <200502040942.j149g60T079093@chilled.skew.org> To: freebsd-ports@freebsd.org Date: Fri, 4 Feb 2005 02:42:06 -0700 (MST) X-Whoa: whoa. X-Mailer: ELM [version 2.4ME+ PL119 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=UTF-8 Subject: variable data in pkg-message? X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Feb 2005 09:42:06 -0000 security-check.awk cannot reasonably be expected to figure out that a Python script that gets installed by my port is a daemon that imports another module in order to get a class that, when instantiated and a certain method is called, uses Python's socket.socket() to create servers. Therefore, post-install, I have a need to print my own security warning, like ===> SECURITY REPORT: This port has installed the following files which may act as network servers and may therefore pose a remote security risk to the system. %%FOO%%/mydaemond If there are vulnerabilities in these programs there may be a security risk to the system. FreeBSD makes no guarantee about the security of ports included in the Ports Collection. Please type 'make deinstall' to deinstall the port if this is a concern. I need to substitute %%FOO%% with ${BINDIR} in order to have the right path appear in the message. I can do this easily in my port's Makefile, which will be fine for people installing the port. But I don't think it's possible to do this for the people installing the package, because pkg-message is just going to be displayed as-is. What should be done? Thanks :) Mike