88166ad6f5
This is from Anton Panev's GSoC 2011 project to add RPM and DPKG support to pkgsrc. (I am not adding that further support in this commit.) This is just a rename of the existing functionality. Now it will be easy to test the GSoC work by simply putting in a single directory (such as "rpm" or "deb"). See http://addpackageforma.sourceforge.net/ for some details. This is from Anton's CVS, but I made some minor changes: - changed plural pkgformats to singular pkgformat (to be consistent) - fixed a few places (in comments) that were missed - catch up on some additions to flavor not in the pkgforma cvs: PKGSRC_SETENV and _flavor-destdir-undo-replace and undo-destdir-replace-install.
25 lines
943 B
Makefile
25 lines
943 B
Makefile
# $NetBSD: check.mk,v 1.1 2011/10/15 00:23:09 reed Exp $
|
|
#
|
|
|
|
# _pkgformat-check-vulnerable:
|
|
# Checks for known vulnerabilities in the package if a vulnerability
|
|
# file exists.
|
|
#
|
|
.if defined(NO_PKGTOOLS_REQD_CHECK)
|
|
_pkgformat-check-vulnerable: .PHONY
|
|
${RUN}${DO_NADA}
|
|
.else
|
|
_pkgformat-check-vulnerable: .PHONY
|
|
${RUN}\
|
|
_PKGVULNDIR=`${_EXTRACT_PKGVULNDIR}`; \
|
|
vulnfile=$$_PKGVULNDIR/pkg-vulnerabilities; \
|
|
if ${TEST} ! -f "$$vulnfile"; then \
|
|
${PHASE_MSG} "Skipping vulnerability checks."; \
|
|
${WARNING_MSG} "No $$vulnfile file found."; \
|
|
${WARNING_MSG} "To fix run: \`${DOWNLOAD_VULN_LIST}'."; \
|
|
exit 0; \
|
|
fi; \
|
|
${PHASE_MSG} "Checking for vulnerabilities in ${PKGNAME}"; \
|
|
${AUDIT_PACKAGES} ${_AUDIT_PACKAGES_CMD} ${AUDIT_PACKAGES_FLAGS} ${PKGNAME} \
|
|
|| ${FAIL_MSG} "Define ALLOW_VULNERABLE_PACKAGES in mk.conf or ${_AUDIT_CONFIG_OPTION} in ${_AUDIT_CONFIG_FILE}(5) if this package is absolutely essential."
|
|
.endif
|