Bug 217099 - ports-mgmt/fbsdmon: Please delete this port
Summary: ports-mgmt/fbsdmon: Please delete this port
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Dmitry Marakasov
URL:
Keywords: security
Depends on:
Blocks:
 
Reported: 2017-02-14 17:35 UTC by Alan Somers
Modified: 2017-12-17 07:12 UTC (History)
1 user (show)

See Also:
amdmi3: merge-quarterly+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alan Somers freebsd_committer freebsd_triage 2017-02-14 17:35:43 UTC
The web site used by this port, http://fbsdmon.org, has been taken over by cybersquatters.  That means that users are sending their system info to an unknown party.  The port has had no maintainer for almost two years and the original maintainer (and previous owner of the website) is not responding to email.

Also, it's redundant with the still-maintained sysutils/bsdstats.
Comment 1 commit-hook freebsd_committer freebsd_triage 2017-02-21 11:13:40 UTC
A commit references this bug:

Author: amdmi3
Date: Tue Feb 21 11:12:35 UTC 2017
New revision: 434518
URL: https://svnweb.freebsd.org/changeset/ports/434518

Log:
  - Deprecate ports-mgmt/fbsdmon

  From the PR:

  "The web site used by this port, http://fbsdmon.org, has been taken
  over by cybersquatters.  That means that users are sending their
  system info to an unknown party.  The port has had no maintainer
  for almost two years and the original maintainer (and previous owner
  of the website) is not responding to email."

  Since there's no way to force this port to be deinstalled from users'
  machines, to stop data being sent to an unknown party, also do the
  following:

  - Modify the port to never send data to fbsdmon.org, bump PORTREVISION
  - Mark the port IGNOREd for ports users, but allow package to be built
    and set extended 6 month EXPIRATION_DATE (or should it be extended
    to a year?) to give a modified package chance to replace original one
    on users machines

  PR:		217099
  Submitted by:	asomers
  MFH:		2017Q1

Changes:
  head/ports-mgmt/fbsdmon/Makefile
Comment 2 commit-hook freebsd_committer freebsd_triage 2017-02-21 11:18:46 UTC
A commit references this bug:

Author: amdmi3
Date: Tue Feb 21 11:18:04 UTC 2017
New revision: 434519
URL: https://svnweb.freebsd.org/changeset/ports/434519

Log:
  MFH: r434518

  - Deprecate ports-mgmt/fbsdmon

  From the PR:

  "The web site used by this port, http://fbsdmon.org, has been taken
  over by cybersquatters.  That means that users are sending their
  system info to an unknown party.  The port has had no maintainer
  for almost two years and the original maintainer (and previous owner
  of the website) is not responding to email."

  Since there's no way to force this port to be deinstalled from users'
  machines, to stop data being sent to an unknown party, also do the
  following:

  - Modify the port to never send data to fbsdmon.org, bump PORTREVISION
  - Mark the port IGNOREd for ports users, but allow package to be built
    and set extended 6 month EXPIRATION_DATE (or should it be extended
    to a year?) to give a modified package chance to replace original one
    on users machines

  PR:		217099
  Submitted by:	asomers
  Approved by:	ports-secteam (with hat)

Changes:
_U  branches/2017Q1/
  branches/2017Q1/ports-mgmt/fbsdmon/Makefile
Comment 3 commit-hook freebsd_committer freebsd_triage 2017-02-21 11:18:48 UTC
A commit references this bug:

Author: amdmi3
Date: Tue Feb 21 11:18:11 UTC 2017
New revision: 434520
URL: https://svnweb.freebsd.org/changeset/ports/434520

Log:
  Document information disclosure vulnerability on fbsdmon

  PR:             217099
  Submitted by:   asomers

Changes:
  head/security/vuxml/vuln.xml
Comment 4 commit-hook freebsd_committer freebsd_triage 2017-07-03 14:10:05 UTC
A commit references this bug:

Author: amdmi3
Date: Mon Jul  3 14:09:02 UTC 2017
New revision: 444956
URL: https://svnweb.freebsd.org/changeset/ports/444956

Log:
  Commit the patch forgotten in the previous commit:

  "- Modify the port to never send data to fbsdmon.org, bump PORTREVISION"

  PR:             217099
  Submitted by:   asomers
  MFH:            2017Q3

Changes:
  head/ports-mgmt/fbsdmon/Makefile
  head/ports-mgmt/fbsdmon/files/patch-src_io.c
Comment 5 commit-hook freebsd_committer freebsd_triage 2017-07-03 14:58:43 UTC
A commit references this bug:

Author: amdmi3
Date: Mon Jul  3 14:58:35 UTC 2017
New revision: 444960
URL: https://svnweb.freebsd.org/changeset/ports/444960

Log:
  MFH: r444956

  Commit the patch forgotten in the previous commit:

  "- Modify the port to never send data to fbsdmon.org, bump PORTREVISION"

  PR:             217099
  Submitted by:   asomers
  Approved by:	ports-secteam (with hat)

Changes:
_U  branches/2017Q3/
  branches/2017Q3/ports-mgmt/fbsdmon/Makefile
  branches/2017Q3/ports-mgmt/fbsdmon/files/patch-src_io.c
Comment 6 vali gholami 2017-12-17 07:12:48 UTC
MARKED AS SPAM