From owner-freebsd-ports@FreeBSD.ORG Mon Jun 15 18:09:21 2009 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 080B81065677 for ; Mon, 15 Jun 2009 18:09:21 +0000 (UTC) (envelope-from mel.flynn+fbsd.ports@mailing.thruhere.net) Received: from mailhub.rachie.is-a-geek.net (rachie.is-a-geek.net [66.230.99.27]) by mx1.freebsd.org (Postfix) with ESMTP id C3C2C8FC20 for ; Mon, 15 Jun 2009 18:09:20 +0000 (UTC) (envelope-from mel.flynn+fbsd.ports@mailing.thruhere.net) Received: from smoochies.rachie.is-a-geek.net (mailhub.lan.rachie.is-a-geek.net [192.168.2.11]) by mailhub.rachie.is-a-geek.net (Postfix) with ESMTP id 166B97E83F; Mon, 15 Jun 2009 10:09:20 -0800 (AKDT) From: Mel Flynn To: freebsd-ports@freebsd.org Date: Mon, 15 Jun 2009 10:09:18 -0800 User-Agent: KMail/1.11.4 (FreeBSD/8.0-CURRENT; KDE/4.2.4; i386; ; ) References: <88733235@bb.ipt.ru> <4A36288D.2080402@bsdforen.de> In-Reply-To: <4A36288D.2080402@bsdforen.de> MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200906151009.19181.mel.flynn+fbsd.ports@mailing.thruhere.net> Cc: Boris Samorodov , Dominic Fandrey Subject: Re: pkg_libchk: a missing library is not detected X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jun 2009 18:09:21 -0000 On Monday 15 June 2009 02:55:09 Dominic Fandrey wrote: > Sorry for the late reply, this was auto-sorted into the ports@ mails > and drowned there. > > Boris Samorodov wrote: > > As I understand pkg_upgrade does not preserve old libraries at > > /usr/local/lib/compat? > > That's true. I consider this common approach a security risk. It is a service interruption to delete libraries that are still used and this can also lead to security problems. However, pkg_upgrade cannot ever hope to fix this problem, because the buildservers do not unconditionally rebuild packages that mention the upgraded port in LIB_DEPENDS, therefore it is better to leave these shared libraries around. > To ensure that you get the newest packages wipe > /usr/ports/packages/All. Erm, the download time associated with that approach doesn't really speed up things, nor does it guarantee that you will have working binaries if the port maintainer forgot to version bump a port. -- Mel