Date: Mon, 23 Jun 2014 00:33:08 +0200 From: Baptiste Daroussin <bapt@FreeBSD.org> To: Dewayne Geraghty <dewayne.geraghty@heuristicsystems.com.au> Cc: philj@openmailbox.org, freebsd-ports@freebsd.org Subject: Re: Ports tree insecure because of IGNOREFILES+IGNORE Message-ID: <20140622223307.GK23976@ivaldir.etoilebsd.net> In-Reply-To: <53A6D7B4.2080601@heuristicsystems.com.au> References: <a226646bae78ce27377cdfc975c3fd46@openmailbox.org> <53A6D7B4.2080601@heuristicsystems.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
--BOhpupldhMlYbdva Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sun, Jun 22, 2014 at 11:18:44PM +1000, Dewayne Geraghty wrote: > Good catch philj, I wasn't aware of this "feature". I'm grepping the > ports that I use as I type my appreciation. Though this makes me wonder > about the efficacy of having a sha signature for the package manifest... > Regards, Dewayne. All the said port has been marked as broken, the "feature" removal is pending for reviews Thanks for the heads up, I wasn't aware of this "feature" regards, Bapt --BOhpupldhMlYbdva Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlOnWaMACgkQ8kTtMUmk6EyjSACfaWUVnUwzp+wSKB1psT3yPzQE sxoAoITdCMv+b1yAA8GqGs7urHu45w99 =F+Ga -----END PGP SIGNATURE----- --BOhpupldhMlYbdva--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20140622223307.GK23976>