The security/isolate port currently suffers from local root privileges escalation problems. It should not be used. The attached patch marks it forbidden. Also marks it broken on pre 8.x due to lack of unlinkat (and openat) syscalls, in preparation for when the security issue is fixed. Fix: Patch attached with submission follows:
Responsible Changed From-To: freebsd-ports-bugs->bapt I'll take it.
Any progress on getting this committed? The port really should be deleted. Thanks, Steve
bapt 2010-08-17 12:50:38 UTC FreeBSD ports repository Modified files: security/vuxml vuln.xml Log: - Add security/isolate entry PR: ports/148911 Submitted by: Steve Wills <steve _at_ mouf.net> (maintainer) Approved by: tabthorpe (mentor) Revision Changes Path 1.2202 +30 -1 ports/security/vuxml/vuln.xml _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
bapt 2010-08-17 13:04:26 UTC FreeBSD ports repository Modified files: . MOVED security Makefile Removed files: security/isolate Makefile distinfo pkg-descr Log: Security vulnerability: local root privileges escalation problems PR: ports/148911 Submitted by: Steve Wills <steve _at_ mouf.net> (maintainer) Approved by: tabthorpe (mentor) Revision Changes Path 1.2201 +2 -1 ports/MOVED 1.1120 +0 -1 ports/security/Makefile 1.3 +0 -31 ports/security/isolate/Makefile (dead) 1.3 +0 -3 ports/security/isolate/distinfo (dead) 1.2 +0 -4 ports/security/isolate/pkg-descr (dead) _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
State Changed From-To: open->closed Port removed. Thanks! sorry for having been so long