PR ports/76915 fell through the cracks?

Kris Kennaway kris at obsecurity.org
Sat Jun 3 12:31:47 PDT 2006


On Fri, Jun 02, 2006 at 10:45:23PM +0200, Ulrich Spoerlein wrote:
> PauAmma wrote:
> > >From the initial PR:
> > 
> >   When /var (or whichever filesystem holds PKG_DBDIR) is mounted noexec,
> >   attempts to deinstall ports will fail and leave a mess behind if the
> >   port has a require or deinstall script. This patch checks for that and
> >   skips deinstalling if that is the case.
> > 
> > (http://www.freebsd.org/cgi/query-pr.cgi?pr=76915 for details)
> 
> I didn't read the patch (yet) and I'm not familiar with the code, but if
> we would enforce all pkg-install/deinstall scripts to be sh(1) scripts,
> then it's simply a matter of replacing ./foo with 'sh foo', right?

And potentially many other similar changes.  The full scope of the
changes required to fully support a noexec /var is clearly enormous,
which is one reason why I don't want to add partial support for this
nonstandard and rarely-used configuration.

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20060603/748a87e0/attachment.pgp


More information about the freebsd-ports mailing list