===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/Attic/checklist.html,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -r1.8 -r1.9
--- www/Attic/checklist.html	1998/12/03 06:09:17	1.8
+++ www/Attic/checklist.html	1998/12/21 23:30:59	1.9
@@ -83,6 +83,7 @@
        in /usr/local/lib/<name> and then copy to /etc or /etc/<name> only
        the files do not exist.
     <p>The OpenBSD file locations are:
+
        <pre>
    user executables:			/usr/local/bin
    system admin executables:		/usr/local/sbin
@@ -98,6 +99,7 @@
    read-only architecture-independent:	/usr/local/share/<name>
    misc documentation:			/usr/local/share/doc/<name>
        </pre>
+
    <p>
    <li><code>make</code><br>
        Begin a cycle of makes until the port is ready.  Patch (see above)
@@ -116,6 +118,25 @@
    <li><code>sudo make install</code><br>
        install the application.
    <p>
+	<li><strong>Check port for security holes again</strong>. This is
+		especially important for network and setuid programs. See
+		<a href="porting.html#security">our security recommendations</a>
+		for that. Log interesting stuff and fixes in the
+		<code>pkg/SECURITY</code> file.  This file 
+		should list audited potential problems, along with relevant patches,
+		so that another person can see at first glance what has been done.
+		Example:
+<pre>
+
+      $OpenBDS$
+
+      ${WRKDIR}/receiver.c
+         call to mktemp (wrapper function do_mktemp) does seem to be correct.
+
+      The server makes extensive use of strlcpy/strlcat/snprintf.
+
+</pre>
+
    <li>Create pkg/PLIST<br>
        After the install is complete use the developers command:
     <p><code>make plist</code>
@@ -240,7 +261,7 @@
   <code>;;;</code> indicates values that must be supplied by the
    porter.  <strong>Remove extraneous comments when done.</strong>
 <pre>
-# $OpenBSD: checklist.html,v 1.8 1998/12/03 06:09:17 marc Exp $
+# $OpenBSD: checklist.html,v 1.9 1998/12/21 23:30:59 espie Exp $
 #
 
 # What port/package will be created
@@ -352,6 +373,6 @@
   <a href="porting.html"><img height=24 width=24 src=back.gif
    border=0 alt=Porting></a> 
   <a href=mailto:www@openbsd.org>www@openbsd.org</a>
-  <br><small>$OpenBSD: checklist.html,v 1.8 1998/12/03 06:09:17 marc Exp $</small>
+  <br><small>$OpenBSD: checklist.html,v 1.9 1998/12/21 23:30:59 espie Exp $</small>
  </body>
 </html>