diff options
| author | jdp <jdp@FreeBSD.org> | 2000-01-14 12:39:57 +0800 |
|---|---|---|
| committer | jdp <jdp@FreeBSD.org> | 2000-01-14 12:39:57 +0800 |
| commit | 4fa62d845cba5310d1707931942bec882d7eaa9f (patch) | |
| tree | 8b509bf1b40471717d5ba83d336a501fd8a6937d /net/cvsup-mirror | |
| parent | 4896f6f8954fc747ef3e4c814d6eb7fd3762b212 (diff) | |
| download | freebsd-ports-gnome-4fa62d845cba5310d1707931942bec882d7eaa9f.tar.gz freebsd-ports-gnome-4fa62d845cba5310d1707931942bec882d7eaa9f.tar.zst freebsd-ports-gnome-4fa62d845cba5310d1707931942bec882d7eaa9f.zip | |
Install a "refuse" file to protect the mirror's scripts and
configuration files from a malicious or compromised master site.
Diffstat (limited to 'net/cvsup-mirror')
| -rw-r--r-- | net/cvsup-mirror/Makefile | 4 | ||||
| -rw-r--r-- | net/cvsup-mirror/files/refuse.self | 6 | ||||
| -rw-r--r-- | net/cvsup-mirror/pkg-plist | 1 |
3 files changed, 10 insertions, 1 deletions
diff --git a/net/cvsup-mirror/Makefile b/net/cvsup-mirror/Makefile index a10bc83f343b..9c58c78dbeda 100644 --- a/net/cvsup-mirror/Makefile +++ b/net/cvsup-mirror/Makefile @@ -22,6 +22,7 @@ NO_PACKAGE= too interactive SCRIPTS_ENV= USA_RESIDENT=${USA_RESIDENT} base=${PREFIX}/etc/cvsup +distrib=${base}/sup.client/distrib rc=${PREFIX}/etc/rc.d do-extract: @@ -29,13 +30,14 @@ do-extract: do-install: @${ECHO_MSG} "Installing files" - @test -d ${base} || ${MKDIR} ${base} + @test -d ${distrib} || ${MKDIR} ${distrib} @test -d ${rc} || ${MKDIR} ${rc} @${INSTALL_DATA} ${WRKSRC}/config.sh ${base} @${INSTALL_SCRIPT} ${FILESDIR}/update.sh ${base} @${INSTALL_DATA} ${FILESDIR}/supfile ${base} @${INSTALL_DATA} ${FILESDIR}/supfile.crypto ${base} @${INSTALL_DATA} ${FILESDIR}/supfile.non-crypto ${base} + @${INSTALL_DATA} ${FILESDIR}/refuse.self ${distrib} @${INSTALL_SCRIPT} ${FILESDIR}/cvsupd.sh ${rc} @${CP} /dev/null ${base}/.start_server diff --git a/net/cvsup-mirror/files/refuse.self b/net/cvsup-mirror/files/refuse.self new file mode 100644 index 000000000000..a69dfec5c2a8 --- /dev/null +++ b/net/cvsup-mirror/files/refuse.self @@ -0,0 +1,6 @@ +*.sh +cvsupd.access +cvsupd.passwd +prefixes +sup.client +supfile* diff --git a/net/cvsup-mirror/pkg-plist b/net/cvsup-mirror/pkg-plist index cd07ad92cf0f..d7f66c09b269 100644 --- a/net/cvsup-mirror/pkg-plist +++ b/net/cvsup-mirror/pkg-plist @@ -1,4 +1,5 @@ etc/cvsup/config.sh +etc/cvsup/sup.client/distrib/refuse.self etc/cvsup/supfile etc/cvsup/supfile.crypto etc/cvsup/supfile.non-crypto |