Re: pkg/59446: not respected: ALLOW_VULNERABLE_PACKAGES=NO

["Kimmo Suominen via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR pkg/59446; it has been noted by GNATS.

From: Kimmo Suominen <kim%netbsd.org@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: pkg/59446: not respected: ALLOW_VULNERABLE_PACKAGES=NO
Date: Tue, 27 May 2025 11:45:02 +0300

 Hi George,
 
 On Tue, May 27, 2025 at 08:00:01AM +0000, george%galis.org@localhost wrote:
 > cat >>$LOCALBASE/etc/mk.conf <<eof
 > # Security and vulnerability management
 > ALLOW_VULNERABLE_PACKAGES=  NO
 > eof
 > 
 > pkgin in tcpdump
 
 You cannot configure pkgin settings in /etc/mk.conf as it has its own
 configuration files.  I don't think pkgin has a corresponding setting,
 though.
 
 If you use "make package-install" instead of "make package" then I would
 expect the setting to be respected.
 
 Kind regards,
 + Kimmo