mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-25 00:51:21 +00:00
Code Issues Releases Activity

Add an install-time warning about insecurity of this port - it has local

Browse Source 
exploits yielding user uucp, but due to the nature of the software probably
isn't going to be widely used on multi-user systems.
This commit is contained in:
Kris Kennaway 2001-02-10 22:36:48 +00:00
parent b1e089f2d8
commit cf7b5ec93d
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=38183
2 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
graphics/camediaplay/Makefile
View File

@ -19,6 +19,11 @@ MAN1= camediaplay.1
DOC= README.english README.japanese PROTOCOL
pre-fetch:
.if !defined(BATCH) && !defined(PACKAGE_BUILDING)
${SH} pkg-install
.endif
post-install:
${MKDIR} ${PREFIX}/share/doc/camediaplay
for i in ${DOC}; do \

9
graphics/camediaplay/pkg-install Normal file
View File

@ -0,0 +1,9 @@
#!/bin/sh
if [ "$2" = "POST-INSTALL" -o -n "${PACKAGE_BUILDING}" ]; then
exit 0
fi
/usr/bin/dialog --yesno "SECURITY NOTE: This port is not safe to install on multi-user systems containing untrusted users - it is vulnerable to a local buffer overflow and format string vulnerability which allow an attacker to obtain access to the uucp user. Do you wish to proceed with the installation of the software anyway?" 9 70 || /usr/bin/false