[RFC/P] Port System Re-Engineering

Paul Schmehl pauls at utdallas.edu
Mon Dec 3 13:05:17 PST 2007


--On Monday, December 03, 2007 14:20:16 -0500 "Aryeh M. Friedman" 
<aryeh.friedman at gmail.com> wrote:
>
> Try this as a challenge then install xdm cleanly on the first try
> without having to install any additional ports from the command line
> (what it drags in is fine)
>>

root at utd59514# make deinstall distclean
===>  Deinstalling for x11/xdm
===>   Deinstalling xdm-1.1.6_2
pkg_delete: package 'xdm-1.1.6_2' is required by these other packages
and may not be deinstalled (but I'll delete it anyway):
krdesktop-1.8_5
xorg-7.3_1
xorg-apps-7.3
===>  Cleaning for xdm-1.1.6_2
===>  Deleting distfiles for xdm-1.1.6_2

root at utd59514# make install clean
=> xdm-1.1.6.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/xorg/app.
=> Attempting to fetch from 
ftp://ftp.gwdg.de/pub/x11/x.org/pub/individual/app/.
xdm-1.1.6.tar.bz2                             100% of  384 kB  149 kBps
===>  Extracting for xdm-1.1.6_2
=> MD5 Checksum OK for xorg/app/xdm-1.1.6.tar.bz2.
=> SHA256 Checksum OK for xorg/app/xdm-1.1.6.tar.bz2.
===>   xdm-1.1.6_2 depends on file: /usr/local/sbin/pkg_info - found
===>  Patching for xdm-1.1.6_2
===>  Applying FreeBSD patches for xdm-1.1.6_2

skip lots of programming stuff.

install -o root -g wheel -m 555 -s chooser /usr/local/lib/X11/xdm/chooser
/bin/cp -n /usr/local/share/examples/xdm/GiveConsole 
/usr/local/lib/X11/xdm/GiveConsole
/bin/cp -n /usr/local/share/examples/xdm/TakeConsole 
/usr/local/lib/X11/xdm/TakeConsole
/bin/cp -n /usr/local/share/examples/xdm/Xaccess 
/usr/local/lib/X11/xdm/Xaccess
/bin/cp -n /usr/local/share/examples/xdm/Xreset 
/usr/local/lib/X11/xdm/Xreset
/bin/cp -n /usr/local/share/examples/xdm/Xresources 
/usr/local/lib/X11/xdm/Xresources
/bin/cp -n /usr/local/share/examples/xdm/Xservers 
/usr/local/lib/X11/xdm/Xservers
/bin/cp -n /usr/local/share/examples/xdm/Xsession 
/usr/local/lib/X11/xdm/Xsession
/bin/cp -n /usr/local/share/examples/xdm/Xsetup_0 
/usr/local/lib/X11/xdm/Xsetup_0
/bin/cp -n /usr/local/share/examples/xdm/Xstartup 
/usr/local/lib/X11/xdm/Xstartup
/bin/cp -n /usr/local/share/examples/xdm/Xwilling 
/usr/local/lib/X11/xdm/Xwilling
/bin/cp -n /usr/local/share/examples/xdm/xdm-config 
/usr/local/lib/X11/xdm/xdm-config
===>   Compressing manual pages for xdm-1.1.6_2
===>   Registering installation for xdm-1.1.6_2
===> SECURITY REPORT:
      This port has installed the following files which may act as network
      servers and may therefore pose a remote security risk to the system.
/usr/local/bin/xdm

      If there are vulnerabilities in these programs there may be a security
      risk to the system. FreeBSD makes no guarantee about the security of
      ports included in the Ports Collection. Please type 'make deinstall'
      to deinstall the port if this is a concern.
===>  Cleaning for xdm-1.1.6_2

What was I supposed to find?

Here's a hint that would help a *ton* of users.  Don't try to install a 
port until your ports tree is up to date.  Completely up to date - as is, 
run portsnap or cvs or cvsup *first*, *then* try to install your port.
>
> I have several possible solutions (contact me privately if you want
> more detail) but am purposely not stating them publically so as not to
> taint the survey any more then it needs to be.
>
This is the part I don't get.  If you have suggestions, post them.  Post 
the code that implements your suggestions.  *Then* people can evaluate 
whether or not your suggestions add value to the ports system.

Why the silly games?  As I read them, this seems to be the primary 
objection of all the people responding who have @freebsd.org in their email 
address.  They've heard it all before, but they know that actions speak 
much louder than words.  If you say "the implementation of foo is flawed", 
and then you post code that, IYO, improves it, people with experience and 
knowledge can review it and say, "Hey, nice idea" or "sorry, your code 
would break ports and here's why".

Without the code, all the surveys and gesticulations in this tread 
accomplish little except to irritate people.

-- 
Paul Schmehl (pauls at utdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/



More information about the freebsd-ports mailing list