Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Oct 2006 11:11:08 +0200
From:      Miroslav Lachman <000.fbsd@quip.cz>
To:        Yoshihiro Ota <ota@j.email.ne.jp>
Cc:        gareth <bsd@lordcow.org>, stable@freebsd.org
Subject:   Re: portaudit
Message-ID:  <453C872C.4040309@quip.cz>
In-Reply-To: <20061022180405.973f2692.ota@j.email.ne.jp>
References:  <20061022161044.GA4635@lordcow.org>	<453BB28B.9010601@quip.cz> <20061022180405.973f2692.ota@j.email.ne.jp>

next in thread | previous in thread | raw e-mail | index | archive | help
Yoshihiro Ota wrote:
[...]
> Hello.
> 
> What are other ways?
> I want to see vulnerable message but still want to install
> without portupgrade being interrupted.
> 
> According to /usr/ports/Mk/bsd.port.mk, DISABLE_VULNERABILITIES=yes
> disables vulnerable check, don't it?

Yes, it disable vulnerability check at all and you will not see any 
vulnerable message.

Some vulnerable ports are also marked as FORBIDDEN in Makefile. If you 
want to install this port, you must comment out this line and use 
DISABLE_VULNERABILITIES=yes (eg awstats port)

I do not know any way to transparently install vulnerable port with 
vulnerable message withou portupgrade interruption.

I do not see any problem in actual behaviour, if some port is 
vulnerable, portupgrade / portinstall gives me the message, I can search 
the web for vulnerability details and if I think I can use this port 
anyway, I can run portupgrade / portinstall again with -m 
"DISABLE_VULNERABILITIES=yes".

Miroslav Lachman



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?453C872C.4040309>