Skip to content

Comments

Demo infrastructure#201

Open
brooksdavis wants to merge 4 commits intomainfrom
demo-infrastructure
Open

Demo infrastructure#201
brooksdavis wants to merge 4 commits intomainfrom
demo-infrastructure

Conversation

@brooksdavis
Copy link
Member

Add some infrastructure to enable demo bootstrapping and safer packaging of vulnerable software used in demos.

Move MAINTAINER and friends up, use MASTERDIR rather than NGINXDIR and
check it in www/nginx/Makefile.
Ports that use this are
 - marked BROKEN unless ALLOW_DELIBERATE_VULNERABILITIES is defined.
 - given a package prefix name of "vulnerable-".
 - have a large warning displayed when installed.
This meta-port can be used to collect requirements for demos.  It
includes two flavors, the default for harmless stuff like tools and
trival demos and a vulnerable flavor which demonstrates the use of
USES=vulnerable and should be used to collect upcoming ports of
vulnerable software.
The port is renamed and tweaked slightly to attempt to build in the new
location, but still builds the standard CHERI nginx.
@brooksdavis
Copy link
Member Author

We might want to drop the nginx-aixcc port commit until it's actually ready, but I did the work so wanted to push it in case it saved someone else some time.

@brooksdavis brooksdavis marked this pull request as ready for review March 24, 2025 23:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant