Commit graph

16 commits

Author SHA1 Message Date
Christian Brueffer
488bd7efe4 Typo-fix in a comment
Approved by:	portmgr (krion)
2004-09-09 13:15:25 +00:00
Oliver Eikemeier
e8a6142888 - update to version 0.5.9
(first attempts to check the base system for vulnerabilities)
2004-09-03 20:30:54 +00:00
Oliver Eikemeier
b88b1935d9 fix "too many open files" error when using the -r flag
Noted by:	nectar
2004-08-23 17:39:12 +00:00
Oliver Eikemeier
153f0ae562 Remove -a from the default fetch(1) flags, so that the daily security
report is not delayed when the distribution site is down.

Submitted by:	kuriyama
2004-08-15 12:26:16 +00:00
Oliver Eikemeier
40f8b91153 fix man page nits,
modify the vulnerability report depending on -q/-v (experimental)

PR:		69935, 68942
Submitted by:	Chris Pepper <pepper@reppep.com>, Johan Karlsson <k@numeri.campus.luth.se>
2004-08-13 17:07:05 +00:00
Oliver Eikemeier
5e008424e7 New option -r: restrict listed entries to selected references.
Useful for testing new entries.
2004-07-24 13:34:52 +00:00
Oliver Eikemeier
2e23771c68 - update to version 0.5
*** NOTE ***

The preferences file format has changed, as have the periodic.conf(5) names.
Normally the default settings should be adequate, except when you need to
configure a proxy. Use $PREFIX/etc/portaudit.conf.sample as an example.

- moved portaudit to sbin
- clean up, merging stuff into the portaudit script
- better return codes and errors to stderr
- -f can check stdin now
- dropped ports tree auditing
- merged the periodic(8) scripts into one
- run daily auditing as `nobody'
2004-07-01 10:59:48 +00:00
Oliver Eikemeier
41c24e6c48 update to version 0.4.1
Use
  portaudit [packagename ...]
to check if package is listed as vulnerable
2004-06-25 01:21:20 +00:00
Oliver Eikemeier
f5b10d70f9 Update to version 0.4, with a new `-f' option.
To check which of the current ports have known vulnerabilities, do

  portaudit -f /usr/ports/INDEX

This port requires pkg_install(-devel)>=20040623
2004-06-23 16:01:38 +00:00
Oliver Eikemeier
9dec4894a1 make expiry date customizable via daily_status_portaudit_expiry 2004-06-21 16:04:27 +00:00
Oliver Eikemeier
cfaf552880 Fetch the database from http://www.FreeBSD.org/ports/ first.
Thanks to:	kuriyama
2004-06-18 08:07:29 +00:00
Oliver Eikemeier
10813956a8 update to 0.3.1:
- use passive ftp by default, don't retry on failure [1]
- add a -C flag, portlint style
- don't keep databases that are tool old [2]

Requested by:	hubs [1]
Noticed by:	Nicolas Rachinsky <nicolas@rachinsky.de> [2]
2004-03-31 22:52:01 +00:00
Oliver Eikemeier
1832c23a94 Update to 0.3.
Since we are using the official VuXML database
the auditing should be pretty complete.

- mention web page
- add more mirrors, disabling .ru mirror (too much lag)
- allow combined options in portaudit shell script
- add sample configuration file
- use absolute paths for binaries, to ease use in crontab scripts [1]
- correct type in man page [2]

PR:		64005 [2]
Submitted by:	Tomasz Pilat <poncki@axelspringer.com.pl> [1]
		Nathan Dove <njdove@wafer.sandia.gov> [2]
2004-03-11 11:11:59 +00:00
Oliver Eikemeier
6cd6202ef7 - bugfix: awk in -CURRENT accepts no regexes in RS, causing the database
update to fail

- add an install & deinstall message

Submitted by:	nectar & Ion-Mihai Tetcu <itetcu@apropo.ro>
2004-02-25 09:46:26 +00:00
Oliver Eikemeier
dd190f52fe update to 0.2:
- new command line tool
- new man page
- reworked database update code, incorporating feedback from
  Max Khon <fjoe>, Radim Kolar <hsn@netmag.cz> (PR 63066) and
  Ion-Mihai Tetcu <itetcu@apropo.ro> (PR 62655)
2004-02-21 21:19:41 +00:00
Oliver Eikemeier
34522b5af1 portaudit provides a list of published security vulnerabilities
of FreeBSD ports and tools to check if installed ports are listed.

Since this is a prerelease version, it is mostly usable for
committers that want to contribute to the project, and can currently
not be relied upon as an extensive security auditing tool.
2004-01-27 19:24:52 +00:00