portaudit

[Miroslav Lachman]

gareth wrote:

> hi, i want to install a port but portaudit won't let me because it
> "has known vulnerabilities".
> 
> trying to tell it it's ok with 'portaudit_fixed' in
> /usr/local/etc/portaudit.conf doesn't work, and trying to deinstall
> portaudit:
> 
> /usr/ports/security/portaudit# make deinstall
> ===>  Deinstalling for security/portaudit
> ===>   Deinstalling portaudit-0.5.11
> ./+REQUIRE: Permission denied
> pkg_delete: package portaudit-0.5.11 fails requirements 
> ./+DEINSTALL: Permission denied
> pkg_delete: deinstall script returned error status
> ./+DEINSTALL: Permission denied
> pkg_delete: post-deinstall script returned error status
> 
> well, i dunno what that means but doesn't work either. so how
> do i get around it?

There are more than one way to install vulnerable port. Sometimes 
DISABLE_VULNERABILITIES=yes may be enough.

Permissions denied may be caused by your file system mount options - if 
you have /var (/var/db/pkg) mounted as noexec, than some ports 
(packages) can not be deinstalled (deinstall script can not be executed)

Miroslav Lachman