Re: Submitting new packages

[Alistair Crooks <agc%pkgsrc.org@localhost>]

On Thu, Jul 03, 2008 at 03:15:06PM -0400, Steven M. Bellovin wrote:
> On Thu, 3 Jul 2008 21:11:54 +0200
> jens.rehsack%bayerbbs.com@localhost wrote:
> 
> > Hi all,
> > 
> > I read in pkgsrc handbook, chap. 21.2, that a new package should be 
> > submitted as a uuencoded, gzip'ed tar archive.
> > In FreeBSD we're using shar(1) which is more comfortable (at least
> > for me ^^).
> > Just a question: Does your process strict requires the uuencoded,
> > gzipped tar archive (though I must submit the pr's using the
> > web-interface) or is a shar file ok, too?
> > Finally, I will create an alias or a small script creating the
> > required format - so I do not want to initiate a big change - it's
> > just a question.
> > 
> shar is a pretty serious security risk for the recipient; I'd be
> appalled if we accepted it.

Absolutely - please submit as a tar archive, or find someone who
can help you do that. It's not that onerous, and it makes our lives
much less stressful.

Many thanks,
Alistair