kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/audit-packages/Makefile

63 lines
1.9 KiB
Makefile
Raw Normal View History

bl3ify
2004-01-05 12:28:07 +01:00
# $NetBSD: Makefile,v 1.40 2004/01/05 11:36:40 jlam Exp $
Initial import of a package to scan a vulnerability list, looking for installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
2000-09-19 21:23:17 +02:00
Update audit-packages to 1.28. By popular demand, add a -v switch to audit-packages(8) which enables the check for a package vulnerabilities file being unchanged for over 7 days. To enable the check, -v must be specified on the command line: % audit-packages % audit-packages -v *** WARNING - /usr/distfiles/pkg-vulnerabilities more than a week old, continuing... %
2004-01-02 00:35:28 +01:00
DISTNAME= audit-packages-1.28
Place WRKSRC where it belongs, to make pkglint happy; ok'ed by wiz.
2003-03-29 13:40:00 +01:00
WRKSRC= ${WRKDIR}
Initial import of a package to scan a vulnerability list, looking for installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
2000-09-19 21:23:17 +02:00
CATEGORIES= security pkgtools
MASTER_SITES= # empty
DISTFILES= # empty
s/netbsd.org/NetBSD.org/
2003-07-18 00:50:55 +02:00
MAINTAINER= agc@NetBSD.org
COMMENT should start with a capital letter.
2003-07-21 19:10:16 +02:00
COMMENT= Tools to show vulnerabilities in installed packages
Initial import of a package to scan a vulnerability list, looking for installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
2000-09-19 21:23:17 +02:00
bl3ify
2004-01-05 12:28:07 +01:00
PKG_INSTALLATION_TYPES= overwrite pkgviews
Initial import of a package to scan a vulnerability list, looking for installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
2000-09-19 21:23:17 +02:00
Update to version 1.21. download-vulnerability-list(8) now needs digest(1). Hence put digest package as a runtime dependency of audit-packages package.
2003-09-12 14:57:10 +02:00
DEPENDS+= digest-[0-9]*:../../pkgtools/digest
bl3ify
2004-01-05 12:28:07 +01:00
USE_BUILDLINK3= yes
NO_CHECKSUM= yes
INSTALLATION_DIRS= man/cat8 man/man8 sbin
Add man page supplied by Jeremy C. Reed in PR 21865, with some fixes by me. Bump to 1.16.
2003-06-12 08:59:30 +02:00
.include "../../mk/bsd.prefs.mk"
AIX doesn't have mandoc, just like SunOS.
2003-12-12 22:40:32 +01:00
.if ${OPSYS} == "SunOS" || ${OPSYS} == "AIX"
Add man page supplied by Jeremy C. Reed in PR 21865, with some fixes by me. Bump to 1.16.
2003-06-12 08:59:30 +02:00
# This doesn't create readable manual pages. "mandoc" should be added
# to zoularis.
NROFF= nroff -man
.else
NROFF= nroff -mandoc
.endif
do-build:
@for f in audit-packages audit-packages.8 \
download-vulnerability-list; do \
Update to version 1.15. The directory ${PKGVULNDIR)} holding the 'vulnerabilities' file which default value is determined at configure time can now be overridden at runtime from the environment. As a side effect the strings substituted at configure time in files/{audit-packages,download-vulnerability-list} are now of the form '@VAR@' and not '${VAR}'.
2003-05-21 16:07:45 +02:00
${SED} -e 's|@PKGVULNDIR@|${PKGVULNDIR}|g' \
-e 's|@AWK@|${AWK}|g' \
-e 's|@FETCH_CMD@|${FETCH_CMD}|g' \
Add man page supplied by Jeremy C. Reed in PR 21865, with some fixes by me. Bump to 1.16.
2003-06-12 08:59:30 +02:00
-e 's|@FETCH_CMD_SHORT@|${FETCH_CMD:T}|g' \
-e 's|@PKGSRCDIR@|${_PKGSRCDIR}|g' \
Update to version 1.15. The directory ${PKGVULNDIR)} holding the 'vulnerabilities' file which default value is determined at configure time can now be overridden at runtime from the environment. As a side effect the strings substituted at configure time in files/{audit-packages,download-vulnerability-list} are now of the form '@VAR@' and not '${VAR}'.
2003-05-21 16:07:45 +02:00
-e 's|@PKG_TOOLS_BIN@|${PKG_TOOLS_BIN}|g' \
-e 's|@SH@|${SH}|g' \
Update audit-packages to 1.18. Changes from previous version: + rely on an embedded sha1 digest to tell whether the vulnerabilities file has been damaged in transit or received successfully, rather than trusting that the file will not grow smaller + use the new filename "pkg-vulnerabilities" + use definitions from defs.${OPSYS}.mk in the download-vulnerability-list script + at installation time, don't rely on "ln -sf" to DTRT - explicitly call "rm -f" before attempting the symbolc link With thanks to seb@ for testing.
2003-09-02 12:20:27 +02:00
-e 's|@DIGEST@|${DIGEST}|g' \
-e 's|@CHMOD@|${CHMOD}|g' \
-e 's|@MV@|${MV}|g' \
-e 's|@RM@|${RM}|g' \
-e 's|@MKDIR@|${MKDIR}|g' \
Whitespace fix, cosmetic only
2003-12-12 16:08:21 +01:00
-e 's|@PKG_SYSCONFDIR@|${PKG_SYSCONFDIR}|g' \
Initial import of a package to scan a vulnerability list, looking for installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
2000-09-19 21:23:17 +02:00
${FILESDIR}/$$f > ${WRKSRC}/$$f; \
done
Add man page supplied by Jeremy C. Reed in PR 21865, with some fixes by me. Bump to 1.16.
2003-06-12 08:59:30 +02:00
${NROFF} ${WRKSRC}/audit-packages.8 >${WRKSRC}/audit-packages.0
Initial import of a package to scan a vulnerability list, looking for installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
2000-09-19 21:23:17 +02:00
do-install:
Update the download-vulnerability-list script to check for the existence of ${DISTDIR}, and to create it if it doesn't exist. This is for machines built with binary packages, which lack pkgsrc, but this way preserves the location of the vulnerabilities file. Addresses PR 12367
2001-03-20 11:36:18 +01:00
@for f in audit-packages download-vulnerability-list; do \
Update audit-packages to 1.18. Changes from previous version: + rely on an embedded sha1 digest to tell whether the vulnerabilities file has been damaged in transit or received successfully, rather than trusting that the file will not grow smaller + use the new filename "pkg-vulnerabilities" + use definitions from defs.${OPSYS}.mk in the download-vulnerability-list script + at installation time, don't rely on "ln -sf" to DTRT - explicitly call "rm -f" before attempting the symbolc link With thanks to seb@ for testing.
2003-09-02 12:20:27 +02:00
${INSTALL_SCRIPT} ${WRKSRC}/$$f ${PREFIX}/sbin; \
Initial import of a package to scan a vulnerability list, looking for installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
2000-09-19 21:23:17 +02:00
done
Add man page supplied by Jeremy C. Reed in PR 21865, with some fixes by me. Bump to 1.16.
2003-06-12 08:59:30 +02:00
${INSTALL_MAN} ${WRKSRC}/audit-packages.0 ${PREFIX}/man/cat8
${INSTALL_MAN} ${WRKSRC}/audit-packages.8 ${PREFIX}/man/man8
Update audit-packages to 1.18. Changes from previous version: + rely on an embedded sha1 digest to tell whether the vulnerabilities file has been damaged in transit or received successfully, rather than trusting that the file will not grow smaller + use the new filename "pkg-vulnerabilities" + use definitions from defs.${OPSYS}.mk in the download-vulnerability-list script + at installation time, don't rely on "ln -sf" to DTRT - explicitly call "rm -f" before attempting the symbolc link With thanks to seb@ for testing.
2003-09-02 12:20:27 +02:00
${RM} -f ${PREFIX}/man/cat8/download-vulnerability-list.0
${LN} -s audit-packages.0 ${PREFIX}/man/cat8/download-vulnerability-list.0
${RM} -f ${PREFIX}/man/man8/download-vulnerability-list.8
${LN} -s audit-packages.8 ${PREFIX}/man/man8/download-vulnerability-list.8
Initial import of a package to scan a vulnerability list, looking for installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
2000-09-19 21:23:17 +02:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink