summaryrefslogtreecommitdiff
path: root/doc/pkgsrc.txt
diff options
context:
space:
mode:
authorerh <erh@pkgsrc.org>2005-11-16 22:13:42 +0000
committererh <erh@pkgsrc.org>2005-11-16 22:13:42 +0000
commit1fc0202a720574039b6736842c5acdff4902705f (patch)
tree519fcbe90657a5f6269be465b9b18cf6bcadb966 /doc/pkgsrc.txt
parent66a80beda971e727e9ee213b4ff308bfff887e7f (diff)
downloadpkgsrc-1fc0202a720574039b6736842c5acdff4902705f.tar.gz
re-generate
Diffstat (limited to 'doc/pkgsrc.txt')
-rw-r--r--doc/pkgsrc.txt14
1 files changed, 14 insertions, 0 deletions
diff --git a/doc/pkgsrc.txt b/doc/pkgsrc.txt
index d13df6be3af..33d81374996 100644
--- a/doc/pkgsrc.txt
+++ b/doc/pkgsrc.txt
@@ -1355,6 +1355,16 @@ XXX
their invocation, and their actual execution progress with set -x will be
displayed.
+ * ALLOW_VULNERABILITIES.pkgbase: A space separated list of vulnerability IDs
+ that may be ignored when performing the automated security checks. These
+ IDs are listed in the pkg-vulnerabilities file and are displayed by
+ audit-packages when it finds a vulnerable package.
+
+ * SKIP_AUDIT_PACKAGES: If this is set to "yes", the automated security checks
+ (which use the security/audit-packages package) will be entirely skipped
+ for all packages built. Normally you'll want to use ALLOW_VULNERABILITIES
+ instead of this.
+
5.4. Selecting Build Options
Some packages have build time options, usually to select between different
@@ -2121,6 +2131,10 @@ Use of the security/audit-packages package is strongly recommended! After
"audit-packages" is installed, please read the package's message, which you can
get by running pkg_info -D audit-package.
+If this package is installed, pkgsrc builds will use it to perform a security
+check before building any package. See Section 5.2, "Variables affecting the
+build process" for way to control this check.
+
Part II. The pkgsrc developer's guide
Table of Contents