Re: Secure PKG_PATH for doas

2016-05-23 Thread Alexander Hall
On May 19, 2016 12:49:25 AM GMT+02:00, Igor Mironov wrote: >The packages and ports' FAQ mentions that those using doas need to pass >keepenv { PKG_PATH } in the config file. Is there a way to instruct >doas to take PKG_PATH (or another variable) from the target

Re: Secure PKG_PATH for doas

2016-05-22 Thread lists
Sat, 21 May 2016 12:34:58 +0100 Raf Czlonka > On Sat, May 21, 2016 at 08:55:37AM BST, Marc Espie wrote: > > On Fri, May 20, 2016 at 03:37:48PM +0100, Raf Czlonka wrote: > > > On Fri, May 20, 2016 at 12:39:46PM BST, Igor Mironov wrote: > > > > > > > Thank you Mart, Ted and

Re: Secure PKG_PATH for doas

2016-05-21 Thread Raf Czlonka
On Sat, May 21, 2016 at 08:55:37AM BST, Marc Espie wrote: > On Fri, May 20, 2016 at 03:37:48PM +0100, Raf Czlonka wrote: > > On Fri, May 20, 2016 at 12:39:46PM BST, Igor Mironov wrote: > > > > > Thank you Mart, Ted and Stuart--I understood that installpath in > > > pkg.conf provides a secure

Re: Secure PKG_PATH for doas

2016-05-21 Thread Marc Espie
On Fri, May 20, 2016 at 03:37:48PM +0100, Raf Czlonka wrote: > On Fri, May 20, 2016 at 12:39:46PM BST, Igor Mironov wrote: > > > Thank you Mart, Ted and Stuart--I understood that installpath in > > pkg.conf provides a secure default, and PKG_PATH should probably > > be used for overrides only (if

Re: Secure PKG_PATH for doas

2016-05-20 Thread Raf Czlonka
On Fri, May 20, 2016 at 12:39:46PM BST, Igor Mironov wrote: > Thank you Mart, Ted and Stuart--I understood that installpath in > pkg.conf provides a secure default, and PKG_PATH should probably > be used for overrides only (if at all). Hi Igor, PKG_PATH is essential - installpath= in

Re: Secure PKG_PATH for doas

2016-05-20 Thread lists
Fri, 20 May 2016 00:18:47 + (UTC) Stuart Henderson > On 2016-05-19, Mart Tõnso wrote: > > Do feel free to select from the list of actual mirrors: > > http://www.openbsd.org/ftp.html > > Or in /etc/examples/pkg.conf. Which reminds the installer already

Re: Secure PKG_PATH for doas

2016-05-20 Thread lists
Fri, 20 May 2016 08:46:47 +0300 li...@wrant.com > Fri, 20 May 2016 00:18:47 + (UTC) Stuart Henderson > > > On 2016-05-19, Mart Tõnso wrote: > > > Do feel free to select from the list of actual mirrors: > > > http://www.openbsd.org/ftp.html > > > > Or

Re: Secure PKG_PATH for doas

2016-05-20 Thread Igor Mironov
Thank you Mart, Ted and Stuart--I understood that installpath in pkg.conf provides a secure default, and PKG_PATH should probably be used for overrides only (if at all). On Friday, 20 May 2016, 3:41, Mart Tõnso wrote: There is an alternative to PKG_PATH env var:

Re: Secure PKG_PATH for doas

2016-05-19 Thread Stuart Henderson
On 2016-05-19, Mart Tõnso wrote: > Do feel free to select from the list of actual mirrors: > http://www.openbsd.org/ftp.html Or in /etc/examples/pkg.conf.

Re: Secure PKG_PATH for doas

2016-05-19 Thread Mart Tõnso
Do feel free to select from the list of actual mirrors: http://www.openbsd.org/ftp.html Mart On Thu, May 19, 2016 at 10:02 PM, Mihai Popescu wrote: >> echo "installpath = http://your.favorite.mirror/; > /etc/pkg.conf > >> .. and enjoy! > > Error from

Re: Secure PKG_PATH for doas

2016-05-19 Thread Mihai Popescu
> echo "installpath = http://your.favorite.mirror/; > /etc/pkg.conf > .. and enjoy! Error from http://your.favorite.mirror/ ftp: your.favorite.mirror: no address associated with name http://your.favorite.mirror/ is empty :-)

Re: Secure PKG_PATH for doas

2016-05-19 Thread Mart Tõnso
There is an alternative to PKG_PATH env var: http://man.openbsd.org/OpenBSD-current/man5/pkg.conf.5 echo "installpath = http://your.favorite.mirror/; > /etc/pkg.conf .. and enjoy! Mart On Thu, May 19, 2016 at 4:32 AM, Ted Unangst wrote: > Igor Mironov wrote: >> The

Re: Secure PKG_PATH for doas

2016-05-18 Thread Ted Unangst
Igor Mironov wrote: > The packages and ports' FAQ mentions that those using doas need to pass > keepenv { PKG_PATH } in the config file. Is there a way to instruct doas to > take PKG_PATH (or another variable) from the target account's environment > (~/.profile)? No, but you can easily write a

Re: Secure PKG_PATH for doas

2016-05-18 Thread Stuart Henderson
On 2016-05-18, Igor Mironov wrote: > The packages and ports' FAQ mentions that those using doas need to pass > keepenv { PKG_PATH } in the config file. Is there a way to instruct doas to > take PKG_PATH (or another variable) from the target account's environment >

Secure PKG_PATH for doas

2016-05-18 Thread Igor Mironov
The packages and ports' FAQ mentions that those using doas need to pass keepenv { PKG_PATH } in the config file. Is there a way to instruct doas to take PKG_PATH (or another variable) from the target account's environment (~/.profile)?