Date: Wed, 19 Jul 2000 21:03:53 +0900 From: "Akinori -Aki- MUSHA" <knu@idaemons.org> To: alex@big.endian.de Cc: asami@FreeBSD.ORG, ports@FreeBSD.ORG Subject: Re: NO_CHECKSUM for only some files Message-ID: <86og3umimu.wl@localhost.local.idaemons.org> In-Reply-To: In your message of "Wed, 19 Jul 2000 13:48:49 %2B0200" <20000719134849.A51793@cichlids.cichlids.com> References: <20000719134849.A51793@cichlids.cichlids.com>
next in thread | previous in thread | raw e-mail | index | archive | help
At Wed, 19 Jul 2000 13:48:49 +0200,
Alex wrote:
> Hello!
> I wonder if we could add some functionality to exclude specific files
> from the checksum-check.
>
> But only some files.
>
> A good example where this could be useful it the astro/xtide port:
>
> While the source of the file should include the checksum-check (for
> trojans), the DATAFILE for the astro-stuff cannot contain trojans or
> similar.
No. An intruder or a malicious administrator/user can put evil thing
in the file when you blindly call it `datafile'.
Any kind of files can contain Makefiles, configure scripts, etc. to
deceive the ports process. I suppose we should hardly trust even
those `data' files,
Please think twice. ;)
--
/
/__ __
/ ) ) ) ) /
Akinori -Aki- MUSHA aka / (_ / ( (__( @ idaemons.org / FreeBSD.org
"We're only at home when we're on the run, on the wing, on the fly"
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86og3umimu.wl>