Subject: Re: pkg/19479: pkgsrc waits until package is built to check for
To: None <franklin@elfie.org>
From: Jeremy C. Reed <reed@reedmedia.net>
List: tech-pkg
Date: 12/20/2002 16:59:26
On Fri, 20 Dec 2002 franklin@elfie.org wrote:
> >Synopsis: pkgsrc waits until package is built to check for security
> >alert
> >How-To-Repeat:
>
> cd /usr/pkgsrc
> cvs update -r netbsd-1-5-PATCH003
You requested the old (non-updated) version.
> cd www/w3m
> make install
> >Fix:
>
> Add checks early on in the make process that a package has a security
> alert issued for it.
Are you talking about audit-packages?
Are you suggesting checking the vulnerabilities list at beginning of the
make? That does sound like an okay idea (if audit-packages is installed).
Jeremy C. Reed
http://bsd.reedmedia.net/