Subject: Re: improved pkg-vulnerabilities checking
To: Roland Illig <rillig@NetBSD.org>
From: Eric Haszlakiewicz <erh@jodi.nimenees.com>
List: tech-pkg
Date: 11/14/2005 12:02:41
On Mon, Nov 14, 2005 at 12:25:44PM +0100, Roland Illig wrote:
> Please rename AUDIT_PACKAGES_OK to _AUDIT_PACKAGES_OK, as it is not 
> meant as user-visible. Same for AUDIT_PACKAGES_MIN_VERSION.
> 
> In bsd.pkg.mk:
> > _ALLOW_VULNERABILITIES=
> I prefer "_ALLOW_VULNERABILITIES=#none" for readability.
	ok, sounds fine to me.

> > +++ security/audit-packages/Makefile
> > @@ -20,6 +20,8 @@
> >  OWN_DIRS=	${PKGVULNDIR}
> >  INSTALLATION_DIRS=	man/cat8 man/man8 sbin
> >
> > +SKIP_AUDIT_PACKAGES=	#defined
> 
> Why not "yes" instead of "#defined"?
	uh, just 'cause? :-)  I suppose "yes" is a little more readable.

> > +++ security/audit-packages/files/audit-packages
> > +for ign in "$ignore_list" ; do
> 
> This will iterate exactly once. I think the quotes should be removed.

	d'oh!  thanks.

eric