Re: Improving security for pkgsrc

[Pierre Pronchery <khorben%defora.org@localhost>]

			Hi,

On 07/23/15 07:23, David Holland wrote:
> On Wed, Jul 22, 2015 at 07:25:08PM -0700, Alistair Crooks wrote:
>  > It might be better, if this is just for pkgsrc, to call the definition
>  > PKGSRC_USE_SSP.

I do not mind, but:
- there are only 6 options in all of mk/defaults/mk.conf that are
  prefixed this way;
- it can easily be applied to pkgsrc only, in mk.conf:
.ifdef BSD_PKG_MK
USE_SSP=yes
.endif
- unprivileged builds will use a different mk.conf anyway.

So I do not think it is really necessary.

> Yes, especially since I and probably others would tend to think that
> "USE_SSP" is something you'd set in a package Makefile.

Actually, it works this way too.

Cheers,
-- 
khorben