Re: fetch extension - use local filename from content-disposition header

From: Simon L. Nielsen <simon_at_FreeBSD.org>
Date: Fri, 30 Dec 2005 11:02:35 +0100
On 2005.12.30 09:36:50 +0000, Matthew Seaman wrote:
> Dag-Erling Smørgrav wrote:
> >Wrong.  If you go into a ports directory and type 'make install clean'
> >as an unprivileged user, the only parts of the build that actually run
> >with root privileges are the final portions of the installation
> >sequence.
> 
> Not if you, as a naive user, take a freshly installed system and an
> unmodified environment.  You'll need to make a bunch of changes
> before everything will run smoothly:
> 
>   * Make /usr/ports/distfiles writable by user or set $DISTDIR to
>     a writable directory
>   * Make /var/db/ports writable by user or set $PORT_DBDIR to a 
>     writable location
>   * Make each port directory writable -- so the the 'work' directories
>     can be created -- or set $WRKDIRPREFIX to a writable location.

It should of cause be mentioned that by doing this you have now made
it possible for "user" to gain root privileges.  This might not a
problem in many cases, but people should be aware of it.

-- 
Simon L. Nielsen

Received on Fri Dec 30 2005 - 09:02:38 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:50 UTC