Index: bsd.fpc.mk =================================================================== --- bsd.fpc.mk (revision 332179) +++ bsd.fpc.mk (working copy) @@ -199,21 +199,9 @@ RUN_DEPENDS+= ${UNITSDIR}/${UNITS}/fpunits.cfg:$ BUILD_DEPENDS+= ${UNITSDIR}/${UNITS}/Package.fpc:${PORTSDIR}/${${UNITS:S/-/_/}_UNIT} RUN_DEPENDS+= ${UNITSDIR}/${UNITS}/Package.fpc:${PORTSDIR}/${${UNITS:S/-/_/}_UNIT} . endif - -security-check: fpc-check-install . endif . endfor -fpc-check-install: -.if defined(UNITPREFIX) && defined(PKGNAMESUFFIX) - @${ECHO_CMD} "#################################################################" - @${ECHO_CMD} "" - @${ECHO_CMD} " The following freepascal unit has been installed in your system:" - @${ECHO_CMD} "" - @${ECHO_CMD} " * ${UNITPREFIX}${PKGNAMESUFFIX:S/-//} " - @${ECHO_CMD} "" - @${ECHO_CMD} "#################################################################" -.endif .endif #.endif Index: bsd.port.mk =================================================================== --- bsd.port.mk (revision 332179) +++ bsd.port.mk (working copy) @@ -4299,48 +4299,6 @@ fix-plist-sequence: ${TMPPLIST} .endif .endif -.if !defined(DISABLE_SECURITY_CHECK) -.if !target(security-check) -security-check: -# Scan PLIST for: -# 1. setugid files -# 2. accept()/recvfrom() which indicates network listening capability -# 3. insecure functions (gets/mktemp/tempnam/[XXX]) -# 4. startup scripts, in conjunction with 2. -# 5. world-writable files/dirs -# - -@${RM} -f ${WRKDIR}/.PLIST.setuid ${WRKDIR}/.PLIST.writable ${WRKDIR}/.PLIST.objdump; \ - ${AWK} -v prefix='${PREFIX}' ' \ - match($$0, /^@cwd /) { prefix = substr($$0, RSTART + RLENGTH); if (prefix == "/") prefix=""; next; } \ - /^@/ { next; } \ - /^\// { print; next; } \ - { print prefix "/" $$0; } \ - ' ${TMPPLIST} > ${WRKDIR}/.PLIST.flattened; \ - ${TR} '\n' '\0' < ${WRKDIR}/.PLIST.flattened \ - | ${XARGS} -0 -J % ${FIND} % -prune ! -type l -type f \( -perm -4000 -o -perm -2000 \) \( -perm -0010 -o -perm -0001 \) 2> /dev/null > ${WRKDIR}/.PLIST.setuid; \ - ${TR} '\n' '\0' < ${WRKDIR}/.PLIST.flattened \ - | ${XARGS} -0 -J % ${FIND} % -prune -perm -0002 \! -type l 2> /dev/null > ${WRKDIR}/.PLIST.writable; \ - ${TR} '\n' '\0' < ${WRKDIR}/.PLIST.flattened \ - | ${XARGS} -0 -J % ${FIND} % -prune ! -type l -type f -print0 2> /dev/null \ - | ${XARGS} -0 -n 1 ${OBJDUMP} -R 2> /dev/null > ${WRKDIR}/.PLIST.objdump; \ - if \ - ! ${AWK} -v audit="$${PORTS_AUDIT}" -f ${PORTSDIR}/Tools/scripts/security-check.awk \ - ${WRKDIR}/.PLIST.flattened ${WRKDIR}/.PLIST.objdump ${WRKDIR}/.PLIST.setuid ${WRKDIR}/.PLIST.writable; \ - then \ - www_site=$$(cd ${.CURDIR} && ${MAKE} www-site); \ - if [ ! -z "$${www_site}" ]; then \ - ${ECHO_MSG}; \ - ${ECHO_MSG} " For more information, and contact details about the security"; \ - ${ECHO_MSG} " status of this software, see the following webpage: "; \ - ${ECHO_MSG} "$${www_site}"; \ - fi; \ - fi -.endif -.else # i.e. defined(DISABLE_SECURITY_CHECK) -security-check: - @${ECHO_MSG} " WARNING: Security check has been disabled." -.endif # !defined(DISABLE_SECURITY_CHECK) - ################################################################ # Skeleton targets start here # @@ -4408,7 +4366,7 @@ _STAGE_SEQ+= stage-qa .if defined(WITH_PKGNG) _INSTALL_DEP= stage _INSTALL_SEQ= install-message run-depends lib-depends check-already-installed -_INSTALL_SUSEQ= fake-pkg security-check +_INSTALL_SUSEQ= fake-pkg _PACKAGE_DEP= stage _PACKAGE_SEQ= package-message pre-package pre-package-script do-package post-package-script @@ -4420,7 +4378,7 @@ _PACKAGE_SEQ= package-message pre-package pre-pack _INSTALL_DEP= package _INSTALL_SEQ= install-message run-depends lib-depends check-already-installed -_INSTALL_SUSEQ= install-package security-check +_INSTALL_SUSEQ= install-package .endif .else # NO_STAGE @@ -4434,7 +4392,7 @@ _INSTALL_SUSEQ= check-umask install-mtree pre-su-i post-install post-install-script add-plist-buildinfo \ add-plist-info add-plist-docs add-plist-examples \ add-plist-data add-plist-post fix-plist-sequence \ - compress-man install-ldconfig-file fake-pkg security-check + compress-man install-ldconfig-file fake-pkg _PACKAGE_DEP= install _PACKAGE_SEQ= package-message pre-package pre-package-script \ do-package post-package-script