Subject: Re: CVS commit: pkgsrc/security/audit-packages
To: Jim Bernard <jbernard@mines.edu>
From: Julio Merino <jmmv@menta.net>
List: pkgsrc-changes
Date: 05/22/2003 16:38:19
On Thu, 22 May 2003 07:45:51 -0600
Jim Bernard <jbernard@mines.edu> wrote:
> On Wed, May 21, 2003 at 06:11:48PM +0200, Alistair Crooks wrote:
> > If you put it under /var, then you may be forcing the
> > download-vulnerability-list script to be run as root. I'm of the opinion
> > that the less work that is done by root, the better, which is why the list
> > is downloaded to ${DISTDIR} (which is not necessarily /usr/pkgsrc/distfiles).
> > The reason that ${DISTDIR} was chosen was that it was a directory that could
> > be guaranteed to be there, and writable.
>
> It's not guaranteed to be writable here. I like to keep pkgsrc on one
> machine in a domain and mount it read-only on the others. (I union mount
> pkgsrc under a locally writable directory in order to do builds.)
Also, that directory won't always exist... I was "surprised" to see a
/usr/pkgsrc directory on a machine where there is no pkgsrc (only binary
packages). It is not really a problem, more now that can be changed "on the
fly", but as a _default_ for prebuilt binaries, it doesn't look good,
IMHO, of course ;)
--
Julio M. Merino Vidal <jmmv@menta.net>
The NetBSD Project - http://www.NetBSD.org/