Subject: Re: improved pkg-vulnerabilities checking
To: Hubert Feyrer <feyrer@cs.stevens.edu>
From: Eric Haszlakiewicz <erh@jodi.nimenees.com>
List: tech-pkg
Date: 11/13/2005 20:02:37
On Wed, Nov 09, 2005 at 11:46:10PM +0100, Hubert Feyrer wrote:
> On Wed, 9 Nov 2005, Eric Haszlakiewicz wrote:
> >	ALLOW_VULNERABLE_PACKAGES+=sun-jdk15-5.0.5
> >	ALLOW_VULNERABLE_PACKAGES+=vulnid:1234
> 
> How about making this consistent with PKG_OPTIONS.foo and do
> 
> 	ALLOW_VULNERABLE_PACKAGES.sun-jdk15=yes
> 	ALLOW_VULNERABLE_PACKAGES.sun-jdk15=1234
> 
> (Or whatever the exact syntax on PKG_OPTIONS for the pkg name is...)

	ok, I did this, but renamed the variable to match better with how it
is used:

	ALLOW_VULNERABILITIES.sun-jdk15=yes     # Skips audit-packages entirely
	ALLOW_VULNERABILITIES.sun-jdk15+=1234   # Ignores vulnerability 1234
	SKIP_AUDIT_PACKAGES=   #defined
	                       # Skips audit-packages for ALL packages.

Patch is at http://poe.swapsimple.com/pkgsrc_audit
I'm going to commit this in the next day or so.

eric