Ports tree insecure because of IGNOREFILES+IGNORE
Baptiste Daroussin
bapt at FreeBSD.org
Sun Jun 22 22:33:13 UTC 2014
On Sun, Jun 22, 2014 at 11:18:44PM +1000, Dewayne Geraghty wrote:
> Good catch philj, I wasn't aware of this "feature". I'm grepping the
> ports that I use as I type my appreciation. Though this makes me wonder
> about the efficacy of having a sha signature for the package manifest...
> Regards, Dewayne.
All the said port has been marked as broken, the "feature" removal is pending for
reviews
Thanks for the heads up, I wasn't aware of this "feature"
regards,
Bapt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20140623/42b2793d/attachment.sig>
More information about the freebsd-ports
mailing list