From 98ad73b18c2f042fb324abaa9c17b5592107620a Mon Sep 17 00:00:00 2001 From: Ade Lovett Date: Fri, 15 Sep 2000 15:20:13 +0000 Subject: Address a potential security issue by forcibly telling ORBit not to listen on any network (IPv4 or IPv6) sockets, if and only if the user hasn't already installed a ${PREFIX}/etc/orbitrc file (the default, and most likely case) Issue raised by: Louis A. Mamakos Discussed on: security mailing list --- devel/ORBit/Makefile | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'devel/ORBit') diff --git a/devel/ORBit/Makefile b/devel/ORBit/Makefile index 780f6a0df741..3e3de5415c8c 100644 --- a/devel/ORBit/Makefile +++ b/devel/ORBit/Makefile @@ -7,6 +7,7 @@ PORTNAME= ORBit PORTVERSION= 0.5.3 +PORTREVISION= 1 CATEGORIES= devel gnome MASTER_SITES= ${MASTER_SITE_GNOME} MASTER_SITE_SUBDIR= stable/sources/ORBit @@ -28,4 +29,11 @@ CONFIGURE_ENV= GLIB_CONFIG="${GLIB_CONFIG}" \ CONFIGURE_ARGS= --disable-indent +post-install: +.if !exists(${PREFIX}/etc/orbitrc) + @${ECHO} "ORBIIOPIPv4=0" > ${PREFIX}/etc/orbitrc + @${ECHO} "ORBIIOPIPv6=0" >> ${PREFIX}/etc/orbitrc + @${ECHO} etc/orbitrc >> ${TMPPLIST} +.endif + .include -- cgit v1.2.3