change ports default work directory prefix

Dirk Engling erdgeist at erdgeist.org
Fri Oct 2 19:21:45 UTC 2015


Today in EuroBSDCon's jail working group we discussed changing the
default for WRKDIRPREFIX to /usr/obj/ports. This has the advantage of
being able to share the ports tree between host system and jails.
Another plus is that cleaning all work directories is much faster than a
recursive make clean.

With the current default, exposing the ports tree to jails potentially
leaks information about installed programs, configured options or host
specific generated secrets (thinking of LocalSettings.php).

On the down side, developers can't by default just copy the port, hack
away and be sure to only modify files in their respective home directories.

bapt@ asked me to discuss this here, also looking for potential other
pitfalls I have not thought about.

Regards,

  erdgeist


More information about the freebsd-ports mailing list