From owner-freebsd-ports@FreeBSD.ORG Mon Jun 28 15:16:03 2004 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AB9B716A4CE for ; Mon, 28 Jun 2004 15:16:03 +0000 (GMT) Received: from newtrinity.zeist.de (newtrinity.zeist.de [217.24.217.8]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1BA9543D2D for ; Mon, 28 Jun 2004 15:16:03 +0000 (GMT) (envelope-from marius@newtrinity.zeist.de) Received: from newtrinity.zeist.de (localhost [127.0.0.1]) i5SFG11a016570; Mon, 28 Jun 2004 17:16:01 +0200 (CEST) (envelope-from marius@newtrinity.zeist.de) Received: (from marius@localhost) by newtrinity.zeist.de (8.12.10/8.12.10/Submit) id i5SFFuvA016569; Mon, 28 Jun 2004 17:15:56 +0200 (CEST) (envelope-from marius) Date: Mon, 28 Jun 2004 17:15:55 +0200 From: Marius Strobl To: ispserver Message-ID: <20040628171555.A15698@newtrinity.zeist.de> References: <121714590.20040628173602@ispserver.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <121714590.20040628173602@ispserver.com>; from sidr@ispserver.com on Mon, Jun 28, 2004 at 05:36:02PM +0900 X-AntiVirus: checked by AntiVir Milter 1.1-beta; AVE 6.26.0.3; VDF 6.26.0.7 (host: newtrinity.zeist.de) cc: ports@freebsd.org Subject: Re: I cannot install port frontpage X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2004 15:16:03 -0000 On Mon, Jun 28, 2004 at 05:36:02PM +0900, ispserver wrote: > Hello ports, > > I have a problem when I installing www/frontpage port on FreeBSD-4.10 > I installed last version of ports, then run `make install` in > /usr/ports/www/frontpage <...> > > Then I found the following record in /usr/ports/misc/compat3x/Makefile > FORBIDDEN= "FreeBSD-SA-03:05.xdr, FreeBSD-SA-03:08.realpath - not fixed / no lib available" > > Why did you place this record in Makefile and what can I do to install frontpage port? > The FORBIDDEN was added in order to inform possible users that the installed libraries have security holes. To install the port anyway comment out the FORBIDDEN. When the issue with security flaws in libraries of old, no longer supported FreeBSD branches used for src/lib/compat/* and misc/compatX ports respectively was discussed on the developers mailing list the conclusion was that if a product depends on such libraries the vendor doesn't care about security in general. So if someone is ok to use such a product she/he doesn't care about security in dependencies either. The problem simply is that there's no manpower to support all FreeBSD branches forever so every branch is declared EoL some point in time (have a look at http://www.freebsd.org/security/index.html#adv for currently supported ones).