cvs commit: ports/security/vuxml vuln.xml

[Oliver Eikemeier]

Jacques Vidrine wrote:

> On Aug 12, 2004, at 7:26 PM, Oliver Eikemeier wrote:
>
>> portaudit understands these just fine, and I guess it is the main 
>> client right now.
>
> I think VuXML.org is the main client :-) but of course that's not the 
> point.

Ah, but it is an important point to me. My main concern is the FreeBSD 
ports collection, I don't care much about OpenBSD compatibility.

> As previously discussed, the semantics of VuXML <name> and <range> 
> elements are package names and version numbers respectively, not globs 
> or glob-like patterns.  In particular, the semantics are not FreeBSD or 
> FreeBSD Ports Collection specific.

That's unfortunate. I would prefer when you would care more about 
portaudit, especially the <range> elements have to adhere to FreeBSD 
semantics. Since you seem not to check your entries with portaudit, I 
have a lot of work dealing with vuxml quirks. OTOH when you think we 
have different design goals, it should be no problem for me to change 
the database, since portaudit is database format agnostic.

-Oliver