Re: help with IGNORE_URL

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

On Fri, Jul 17, 2009 at 11:25:25PM -0400, Steven M. Bellovin wrote:
> in /etc/pkg_install.conf; when I check it via
> 
>       # pkg_admin config-var IGNORE_URL
>       http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1889
>       some-other-advisory

A better check would be "pkg_admin audit-pkg pidgin-2.5.7", just as
reference.

> I get what seems to be the right answer.  Nevertheless, when I try to
> build it the system complains about the vulnerability:

Do you have pkg_install installed from pkgsrc? That would use
${PREFIX}/etc/pkg_install.conf.

Joerg