===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/Attic/checklist.html,v
retrieving revision 1.8
retrieving revision 1.9
diff -c -r1.8 -r1.9
*** www/Attic/checklist.html	1998/12/03 06:09:17	1.8
--- www/Attic/checklist.html	1998/12/21 23:30:59	1.9
***************
*** 83,88 ****
--- 83,89 ----
         in /usr/local/lib/<name> and then copy to /etc or /etc/<name> only
         the files do not exist.
      <p>The OpenBSD file locations are:
+ 
         <pre>
     user executables:			/usr/local/bin
     system admin executables:		/usr/local/sbin
***************
*** 98,103 ****
--- 99,105 ----
     read-only architecture-independent:	/usr/local/share/<name>
     misc documentation:			/usr/local/share/doc/<name>
         </pre>
+ 
     <p>
     <li><code>make</code><br>
         Begin a cycle of makes until the port is ready.  Patch (see above)
***************
*** 116,121 ****
--- 118,142 ----
     <li><code>sudo make install</code><br>
         install the application.
     <p>
+ 	<li><strong>Check port for security holes again</strong>. This is
+ 		especially important for network and setuid programs. See
+ 		<a href="porting.html#security">our security recommendations</a>
+ 		for that. Log interesting stuff and fixes in the
+ 		<code>pkg/SECURITY</code> file.  This file 
+ 		should list audited potential problems, along with relevant patches,
+ 		so that another person can see at first glance what has been done.
+ 		Example:
+ <pre>
+ 
+       $OpenBDS$
+ 
+       ${WRKDIR}/receiver.c
+          call to mktemp (wrapper function do_mktemp) does seem to be correct.
+ 
+       The server makes extensive use of strlcpy/strlcat/snprintf.
+ 
+ </pre>
+ 
     <li>Create pkg/PLIST<br>
         After the install is complete use the developers command:
      <p><code>make plist</code>
***************
*** 240,246 ****
    <code>;;;</code> indicates values that must be supplied by the
     porter.  <strong>Remove extraneous comments when done.</strong>
  <pre>
! # $OpenBSD: checklist.html,v 1.8 1998/12/03 06:09:17 marc Exp $
  #
  
  # What port/package will be created
--- 261,267 ----
    <code>;;;</code> indicates values that must be supplied by the
     porter.  <strong>Remove extraneous comments when done.</strong>
  <pre>
! # $OpenBSD: checklist.html,v 1.9 1998/12/21 23:30:59 espie Exp $
  #
  
  # What port/package will be created
***************
*** 352,357 ****
    <a href="porting.html"><img height=24 width=24 src=back.gif
     border=0 alt=Porting></a> 
    <a href=mailto:www@openbsd.org>www@openbsd.org</a>
!   <br><small>$OpenBSD: checklist.html,v 1.8 1998/12/03 06:09:17 marc Exp $</small>
   </body>
  </html>
--- 373,378 ----
    <a href="porting.html"><img height=24 width=24 src=back.gif
     border=0 alt=Porting></a> 
    <a href=mailto:www@openbsd.org>www@openbsd.org</a>
!   <br><small>$OpenBSD: checklist.html,v 1.9 1998/12/21 23:30:59 espie Exp $</small>
   </body>
  </html>