ports/59084: [MAINTAINER UPDATE] security/freebsd-update

Colin Percival cperciva at daemonology.net
Sun Nov 9 16:20:16 UTC 2003


>Number:         59084
>Category:       ports
>Synopsis:       [MAINTAINER UPDATE] security/freebsd-update
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Sun Nov 09 08:20:13 PST 2003
>Closed-Date:
>Last-Modified:
>Originator:     Colin Percival
>Release:        FreeBSD 4.7-SECURITY i386
>Organization:
>Environment:
>Description:

I haven't tested FreeBSD Update's RSA code on non-i386 platforms, and I 
don't want people relying upon this until I've had a chance to do that 
testing.  Since nobody (AFAIK) is building binary updates for use with 
FreeBSD Update on non-i386 platforms, this shouldn't inconvenience anyone.

Also, add a note reminding people not to touch this port.

>How-To-Repeat:
>Fix:

--- freebsd-update.diff.5 begins here ---
diff -ruN security/freebsd-update.orig/Makefile security/freebsd-update/Makefile
--- security/freebsd-update.orig/Makefile	Wed Oct 15 08:20:24 2003
+++ security/freebsd-update/Makefile	Sun Nov  9 15:34:32 2003
@@ -10,8 +10,17 @@
 CATEGORIES=	security
 MASTER_SITES=	http://www.daemonology.net/freebsd-update/
 
+# This is a critical security port.  If it breaks, Bad Things will happen.
+# Under no circumstances should this port ever be modified without approval
+# from the maintainer or security-officer, even for "cosmetic" fixes.
+
 MAINTAINER=	cperciva at daemonology.net
 COMMENT=	Fetches and installs binary updates to FreeBSD
+
+# The RSA code has only been tested on i386; I don't *think* there are
+# any word-size or endian issues, but I'm not sure.  Since nobody is 
+# building updates for non-i386 platforms anyway, this won't hurt anyone.
+ONLY_FOR_ARCHS=	i386
 
 RUN_DEPENDS=	bspatch:${PORTSDIR}/misc/bsdiff
 
--- freebsd-update.diff.5 ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list