[pkgsrc/trunk]: pkgsrc/doc re-generate

[erh <erh%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/1f038c78cb3d
branches:  trunk
changeset: 503239:1f038c78cb3d
user:      erh <erh%pkgsrc.org@localhost>
date:      Wed Nov 16 22:13:42 2005 +0000

description:
re-generate

diffstat:

 doc/pkgsrc.html |  38 ++++++++++++++++++++++++++++++++++++++
 doc/pkgsrc.txt  |  14 ++++++++++++++
 2 files changed, 52 insertions(+), 0 deletions(-)

diffs (86 lines):

diff -r 9821a5f06b14 -r 1f038c78cb3d doc/pkgsrc.html
--- a/doc/pkgsrc.html   Wed Nov 16 22:11:11 2005 +0000
+++ b/doc/pkgsrc.html   Wed Nov 16 22:13:42 2005 +0000
@@ -3695,6 +3695,37 @@
                 progress with <span><strong class="command">set
                 -x</strong></span> will be displayed.</p>
               </li>
+
+              <li>
+                <p><code class=
+                "varname">ALLOW_VULNERABILITIES.<em class=
+                "replaceable"><code>pkgbase</code></em></code>: A
+                space separated list of vulnerability IDs that may
+                be ignored when performing the automated security
+                checks. These IDs are listed in the
+                pkg-vulnerabilities file and are displayed by
+                <span><strong class=
+                "command">audit-packages</strong></span> when it
+                finds a vulnerable package.</p>
+              </li>
+
+              <li>
+                <p><code class=
+                "varname">SKIP_AUDIT_PACKAGES</code>: If this is
+                set to &#8220;<span class=
+                "quote">yes</span>&#8221;, the automated security
+                checks (which use the <a xmlns=
+                "http://www.w3.org/TR/xhtml1/transitional"; href=
+                "ftp://ftp.NetBSD.org/pub/NetBSD/packages/pkgsrc/security/audit-packages/README.html";
+                target="_top"><code xmlns="" class=
+                "filename">security/audit-packages</code></a>
+                package) will be <span class=
+                "strong"><strong>entirely</strong></span> skipped
+                for <span class=
+                "strong"><strong>all</strong></span> packages
+                built. Normally you'll want to use
+                ALLOW_VULNERABILITIES instead of this.</p>
+              </li>
             </ul>
           </div>
         </div>
@@ -5722,6 +5753,13 @@
           read the package's message, which you can get by running
           <strong class="userinput"><code>pkg_info -D
           audit-package</code></strong>.</p>
+
+          <p>If this package is installed, pkgsrc builds will use
+          it to perform a security check before building any
+          package. See <a href="#variables-affecting-build" title=
+          "5.2.&nbsp;Variables affecting the build process">Section&nbsp;5.2,
+          &#8220;Variables affecting the build process&#8221;</a>
+          for way to control this check.</p>
         </div>
       </div>
     </div>
diff -r 9821a5f06b14 -r 1f038c78cb3d doc/pkgsrc.txt
--- a/doc/pkgsrc.txt    Wed Nov 16 22:11:11 2005 +0000
+++ b/doc/pkgsrc.txt    Wed Nov 16 22:13:42 2005 +0000
@@ -1355,6 +1355,16 @@
     their invocation, and their actual execution progress with set -x will be
     displayed.
 
+  * ALLOW_VULNERABILITIES.pkgbase: A space separated list of vulnerability IDs
+    that may be ignored when performing the automated security checks. These
+    IDs are listed in the pkg-vulnerabilities file and are displayed by
+    audit-packages when it finds a vulnerable package.
+
+  * SKIP_AUDIT_PACKAGES: If this is set to "yes", the automated security checks
+    (which use the security/audit-packages package) will be entirely skipped
+    for all packages built. Normally you'll want to use ALLOW_VULNERABILITIES
+    instead of this.
+
 5.4. Selecting Build Options
 
 Some packages have build time options, usually to select between different
@@ -2121,6 +2131,10 @@
 "audit-packages" is installed, please read the package's message, which you can
 get by running pkg_info -D audit-package.
 
+If this package is installed, pkgsrc builds will use it to perform a security
+check before building any package. See Section 5.2, "Variables affecting the
+build process" for way to control this check.
+
 Part II. The pkgsrc developer's guide
 
 Table of Contents