Re: Enumerating glibc dependencies

2015-02-02 Thread Chris Nehren
valent (single) command for pkgng? Hey Roger, You'll want `pkg info -r` for this--and note that glib is not glibc! -- Chris Nehren pgpKb9OIEynrP.pgp Description: OpenPGP digital signature

Re: ntpd vulnerabilities

2014-12-22 Thread Chris Nehren
t version. If you want fast security updates, use ports. Or hire developers to patch software for you. -- Chris Nehren pgpraIZ0e0xJ1.pgp Description: PGP signature

Re: bash velnerability

2014-09-25 Thread Chris Nehren
Sandbox each > application into its own user. And its own jail. Jails with ZFS are dirt cheap. -- Chris Nehren pgp_th8N350zW.pgp Description: PGP signature

Re: Ports tree insecure because of IGNOREFILES+IGNORE

2014-06-22 Thread Chris Nehren
ler things to cause a problem. The Project doesn't have the resources to audit every single distfile's code. If you're that paranoid, you're welcome to do so yourself. -- Chris Nehren signature.asc Description: This is a digitally signed message part.

Re: Heartbleed / r264266 / openssl version

2014-04-08 Thread Chris Nehren
oth ~] I can't say this is very useful. Is this only supposed to work for -RELEASE? -- Chris Nehren pgp8HDAvo8ETQ.pgp Description: PGP signature

FreeBSD's heartbleed response

2014-04-08 Thread Chris Nehren
ixes out more quickly? I and others have hardware and time we'd be glad to donate if it would help resolve these sorts of critical issues more quickly. I'm sorry if I sound impatient. I want to help, but don't know how, so I'm asking here. -- Chris Nehren pgplacYTicAbR.pgp Description: PGP signature