Subject: Re: README.html: cannot find vulnerability list
To: Joerg Sonnenberger <joerg@britannica.bec.de>
From: Gary Thorpe <gathorpe79@yahoo.com>
List: pkgsrc-users
Date: 08/02/2007 13:28:16
--- Joerg Sonnenberger <joerg@britannica.bec.de> wrote:

> On Thu, Aug 02, 2007 at 12:34:26AM -0400, Gary Thorpe wrote:
> > Whenever I try to do 'make README.html' in a package directory, I
> > encounter this problem (hand-copied):
> 
> Does the attached patch help?
> 
> Joerg
> > Index: check.mk
> ===================================================================
> RCS file: /home/joerg/repo/netbsd/pkgsrc/mk/flavor/pkg/check.mk,v
> retrieving revision 1.4
> diff -u -r1.4 check.mk
> --- check.mk	14 Jul 2007 17:17:46 -0000	1.4
> +++ check.mk	1 Aug 2007 11:44:03 -0000
> @@ -11,8 +11,7 @@
>  #
>  _flavor-check-vulnerable: .PHONY
>  	${_PKG_SILENT}${_PKG_DEBUG}					\
> -	_INFO_VER=`${PKG_INFO} -V`;					\
> -	if ${PKG_ADMIN} pmatch 'pkg_install<20070714'
> pkg_install-$$_INFO_VER; then \
> +	if ${PKG_ADMIN} pmatch 'pkg_install<20070714'
> pkg_install-${PKGTOOLS_VERSION}; then \
>  		vulnfile=${PKGVULNDIR:Q}/pkg-vulnerabilities;		\
>  		if ${TEST} ! -f "$$vulnfile"; then			\
>  			${PHASE_MSG} "Skipping vulnerability checks.";	\

I applied the patch but the result seems to be the same:

rider 51% cvs diff -u check.mk
socket: Protocol not supported
Index: check.mk
===================================================================
RCS file: /cvsroot/pkgsrc/mk/flavor/pkg/check.mk,v
retrieving revision 1.4
diff -u -r1.4 check.mk
--- check.mk    14 Jul 2007 17:17:46 -0000      1.4
+++ check.mk    2 Aug 2007 17:22:21 -0000
@@ -11,8 +11,7 @@
 #
 _flavor-check-vulnerable: .PHONY
        ${_PKG_SILENT}${_PKG_DEBUG}                                    
\
-       _INFO_VER=`${PKG_INFO} -V`;                                    
\
-       if ${PKG_ADMIN} pmatch 'pkg_install<20070714'
pkg_install-$$_INFO_VER; then \
+       if ${PKG_ADMIN} pmatch 'pkg_install<20070714'
pkg_install-${PKGTOOLS_VERSION}; then \
                vulnfile=${PKGVULNDIR:Q}/pkg-vulnerabilities;          
\
                if ${TEST} ! -f "$$vulnfile"; then                     
\
                        ${PHASE_MSG} "Skipping vulnerability checks."; 
\
rider 52% pwd
/usr/pkgsrc/mk/flavor/pkg
rider 53% cd ../../../www/lynx/
rider 54% make README.html
---->  Creating new database in /usr/pkgsrc/www/lynx/README.html.tmp1
---->  Depending in /usr/pkgsrc/www/lynx (pass #1)
---->  Depending in ../../devel/zlib (pass #2)
---->  Depending in ../../devel/libtool-base (pass #3)
Complete dependency database left in
/usr/pkgsrc/www/lynx/README.html.tmp1
Reading database file
Making sure binary package cache file is up to date...
----> Checking cache in /usr/pkgsrc/packages/All
      Entries found in /usr/pkgsrc/packages/All/.pkgcache but no
packages found
      Forcing rebuild of cache /usr/pkgsrc/packages/All/.pkgcache.
----> Checking master cache file /usr/pkgsrc/packages/.pkgcache
      Updating master cache file /usr/pkgsrc/packages/.pkgcache
Loading binary package cache file...
    * /usr/pkgsrc/packages/.pkgcache
    * /usr/pkgsrc/packages/All/.pkgcache
Flattening dependencies
Flattening build dependencies
ls: /pkg-vulnerabilities: No such file or directory
No vulnerability file found (/pkg-vulnerabilities).
Only creating README for www/lynx
Generating README.html files
. 

The output from `pkg_info -V` is '20051122'. The audit-packages
configuration is in /usr/pkg/etc/audit-packages.conf and has nothing
but comments, but this comment suggests the pkg-vulnerabilitiews file
is in the correct place:

# PKGVULNDIR
#
# Specifies the directory containing the pkg-vulnerabilities file.
# Default: PKGVULNDIR="${DISTDIR}"



      Make free worldwide PC-to-PC calls. Try the new Yahoo! Canada Messenger at http://ca.messenger.yahoo.com/