From owner-freebsd-questions  Thu Mar 30  8: 5:22 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from radagast.wizard.net (radagast.wizard.net [206.161.15.5])
	by hub.freebsd.org (Postfix) with ESMTP id 5AA0737BE0F
	for <freebsd-questions@freebsd.org>; Thu, 30 Mar 2000 08:05:16 -0800 (PST)
	(envelope-from tyson@stanfordalumni.org)
Received: from stanfordalumni.org (tc2-s6.wizard.net [206.161.15.82])
	by radagast.wizard.net (8.8.7/8.8.7) with ESMTP id LAA20134;
	Thu, 30 Mar 2000 11:05:18 -0500
Message-Id: <200003301605.LAA20134@radagast.wizard.net>
To: Alan Clegg <abc@firehouse.net>
Cc: freebsd-questions@freebsd.org
Subject: Re: Lynx forbidden 
In-Reply-To: Your message of "Thu, 30 Mar 2000 10:02:48 EST."
             <20000330100248.L3459@laptop.firehouse.net> 
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <4842.954432308.1@stanfordalumni.org>
Date: Thu, 30 Mar 2000 11:05:08 -0500
From: "Donald R. Tyson" <tyson@stanfordalumni.org>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Thank you.  Happily compiling away as I type.
I knew I was missing something obvious, and I was.

Don Tyson

> 
> --L/bWm/e7/ricERqM
> Content-Type: text/plain; charset=us-ascii
> Content-Transfer-Encoding: quoted-printable
> 
> Out of the ether, tyson@stanfordalumni.org spewed forth the following bitst=
> ream:
> > I must be missing something obvious here.  The LYNX port is
> > marked ``forbidden'' because of its vulnerability to
> > buffer overflow exploits;  we have seen the security
> > advisory, and the port's make file refuses to build.
> 
> [...]
> 
> > It seems to me that the better course would be to allow
> > those who wish to go ahead and install it and take their=20
> > chances.
> 
> You can.  Just comment out the:
> 
> FORBIDDEN=3D      "Riddled with buffer overflows exploitable by a malicious=
>  server
>  to execute code as the local user."
> 
> line in /usr/ports/www/lynx/Makefile and go for it.
> 
> Next time you cvsup, it will re-protect you from lynx, but no big deal.
> 
> AlanC
> 
> --L/bWm/e7/ricERqM
> Content-Type: application/pgp-signature
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGPfreeware 5.0i for non-commercial use
> MessageID: vvGv8XfanVpnfgN4JzcaVKAswMSRcu3D
> 
> iQA/AwUBOONsmPcyv/gweBpYEQIDuwCg41DQ+Q1bFGxKp7iCHkhD+sZ4lVoAn1uh
> h/B+0OjTct+PIgs/oIz7C4jE
> =B/jD
> -----END PGP SIGNATURE-----
> 
> --L/bWm/e7/ricERqM--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message