From owner-freebsd-questions@FreeBSD.ORG Mon Feb 24 02:26:43 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1375CA8D for ; Mon, 24 Feb 2014 02:26:43 +0000 (UTC) Received: from blu0-omc2-s1.blu0.hotmail.com (blu0-omc2-s1.blu0.hotmail.com [65.55.111.76]) by mx1.freebsd.org (Postfix) with ESMTP id CD0AE1E33 for ; Mon, 24 Feb 2014 02:26:42 +0000 (UTC) Received: from BLU0-SMTP295 ([65.55.111.71]) by blu0-omc2-s1.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sun, 23 Feb 2014 18:25:36 -0800 X-TMN: [EPl3wZlo3O8/qgWdkJl2JYPJSS8/vDgk] X-Originating-Email: [drew@mykitchentable.net] Message-ID: Received: from [127.0.0.1] ([69.62.167.70]) by BLU0-SMTP295.phx.gbl over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Sun, 23 Feb 2014 18:25:33 -0800 Date: Sun, 23 Feb 2014 18:25:30 -0800 From: Drew Tomlinson User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: Polytropon Subject: Re: How To Install Port Marked IGNORE -- SOLVED References: <20140224020358.efe1bf33.freebsd@edvax.de> In-Reply-To: <20140224020358.efe1bf33.freebsd@edvax.de> Content-Type: text/plain; charset="ISO-8859-1"; format=flowed Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 140223-1, 02/23/2014), Outbound message X-Antivirus-Status: Clean X-OriginalArrivalTime: 24 Feb 2014 02:25:33.0818 (UTC) FILETIME=[B2041DA0:01CF3107] Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Feb 2014 02:26:43 -0000 On 2/23/2014 5:03 PM, Polytropon wrote: > On Sun, 23 Feb 2014 16:43:03 -0800, Drew Tomlinson wrote: >> I'm trying to install net/ntp but get this message: >> >> ** Port marked as IGNORE: net/ntp: >> is forbidden: CVE-2013-5211 / VU >> >> OK, I know about the monlist issue and will address that in my conf >> file. Thus I'd like to build and install anyway. How do I override >> this? >> Google posts suggest removing the "IGNORE" from the Makefile. > A very bad suggestion. You should not mess with port Makefiles, > especially not for that kind of purpose, to fix a problem by > creating another problem. :-) > > > >> However I do not see it in either net/ntp/Makefile or >> net/ntp/Makefile.inc. Where is is? Or should I do something else? > It will be set automatically if certain criteria are met. > You'll find the mechanism and some hints why and where it is > being used in /usr/ports/Mk/bsd.port.mk. Let me quote regarding > the IGNORE mark: > > Package build should be skipped entirely (e.g. > because of serious unfixable problems in the build, > because it cannot be manually fetched, etc). > > The reason will be stored in $IGNORE so you can refer to it. > This shows: Ports marked as IGNORE probably won't build at all. > > If you still want to (try to) build the port, see what "man 7 ports" > has to offer (except it's refering to FORBIDDEN, not IGNORE): > > NO_IGNORE If defined, allow installation of ports marked as > . The default behavior of the Ports framework > is to abort when the installation of a forbidden port is > attempted. Of course, these ports may not work as > expected, but if you really know what you are doing and are > sure about installing a forbidden port, then NO_IGNORE lets > you do it. > > This is what you could try: > > # make -D NO_IGNORE install > > But keep in mind that IGNORE isn't there for no particular reason. :-) Thank you for the nice explanation. Your suggestion worked. I believe it is marked IGNORE only because of the security vulnerability. Because this is used on my private LAN and not available to the public, I do not believe I am at any risk. However I have followed the configuration recommendations in the alert just to be sure. -- Like card tricks? Visit The Alchemist's Warehouse to learn card magic secrets for free! http://alchemistswarehouse.com