From owner-freebsd-ports@FreeBSD.ORG Mon May 28 17:15:00 2012 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id C53191065773 for ; Mon, 28 May 2012 17:15:00 +0000 (UTC) (envelope-from stephen@missouri.edu) Received: from wilberforce.math.missouri.edu (wilberforce.math.missouri.edu [128.206.184.213]) by mx1.freebsd.org (Postfix) with ESMTP id 718418FC22 for ; Mon, 28 May 2012 17:15:00 +0000 (UTC) Received: from [127.0.0.1] (wilberforce.math.missouri.edu [128.206.184.213]) by wilberforce.math.missouri.edu (8.14.5/8.14.5) with ESMTP id q4SHExpn022411 for ; Mon, 28 May 2012 12:14:59 -0500 (CDT) (envelope-from stephen@missouri.edu) Message-ID: <4FC3B293.6090701@missouri.edu> Date: Mon, 28 May 2012 12:14:59 -0500 From: Stephen Montgomery-Smith User-Agent: Mozilla/5.0 (X11; Linux i686; rv:12.0) Gecko/20120430 Thunderbird/12.0.1 MIME-Version: 1.0 To: freebsd-ports@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: math/sage security risk X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2012 17:15:00 -0000 After my recent conversations about creating a print/texlive-install port, I realize that my math/sage port might have a security risk. This only happens if the user selects additional optional packages. But the optional packages are downloaded post-fetch. I'll make some immediate band-aid changes to the port to switch this off, but I'll think through the issue in the days to come. Stephen