Ports tree insecure because of IGNOREFILES+IGNORE

Baptiste Daroussin bapt at FreeBSD.org
Sun Jun 22 22:33:13 UTC 2014


On Sun, Jun 22, 2014 at 11:18:44PM +1000, Dewayne Geraghty wrote:
> Good catch philj, I wasn't aware of this "feature".  I'm grepping the
> ports that I use as I type my appreciation.  Though this makes me wonder
> about the efficacy of having a sha signature for the package manifest...
> Regards, Dewayne.

All the said port has been marked as broken, the "feature" removal is pending for
reviews

Thanks for the heads up, I wasn't aware of this "feature"

regards,
Bapt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20140623/42b2793d/attachment.sig>


More information about the freebsd-ports mailing list