aboutsummaryrefslogtreecommitdiffstats
path: root/ports-mgmt/portaudit
Commit message (Collapse)AuthorAgeFilesLines
* - Fix portaudit -Fq to actually be quiet. [1]simon2007-12-272-18/+6
| | | | | | | | | | - Remove support for FreeBSD older than 4.11 and 5.3. - Remove conditional dependency on bzip2 which I can't really see how could be activated automatically. Reported by: "J. Martin Petersen" <jmp@alvorlig.dk> [1] PR: ports/117845 [1] With hat: maintainer / secteam
* Add security to CATEGORIESerwin2007-04-021-1/+1
| | | | "Sounds like a good idea": simon
* Correct URL to the VuXML pages for FreeBSD. Also bump modification date.remko2007-03-151-2/+2
| | | | | PR: ports/104813 Submitted by: Alan Amesbury <amesbury at umn dot edu>
* Populate a new ports-mgmt category. List of moved ports:pav2007-02-051-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | devel/portcheckout -> ports-mgmt/portcheckout devel/portlint -> ports-mgmt/portlint devel/portmk -> ports-mgmt/portmk devel/porttools -> ports-mgmt/porttools misc/instant-tinderbox -> ports-mgmt/instant-tinderbox misc/porteasy -> ports-mgmt/porteasy misc/portell -> ports-mgmt/portell misc/portless -> ports-mgmt/portless misc/tinderbox -> ports-mgmt/tinderbox security/jailaudit -> ports-mgmt/jailaudit security/portaudit -> ports-mgmt/portaudit security/portaudit-db -> ports-mgmt/portaudit-db security/vulnerability-test-port -> ports-mgmt/vulnerability-test-port sysutils/barry -> ports-mgmt/barry sysutils/bpm -> ports-mgmt/bpm sysutils/kports -> ports-mgmt/kports sysutils/managepkg -> ports-mgmt/managepkg sysutils/newportsversioncheck -> ports-mgmt/newportsversioncheck sysutils/pib -> ports-mgmt/pib sysutils/pkgfe -> ports-mgmt/pkgfe sysutils/pkg-orphan -> ports-mgmt/pkg-orphan sysutils/pkg_cutleaves -> ports-mgmt/pkg_cutleaves sysutils/pkg_install -> ports-mgmt/pkg_install sysutils/pkg_install-devel -> ports-mgmt/pkg_install-devel sysutils/pkg_remove -> ports-mgmt/pkg_remove sysutils/pkg_rmleaves -> ports-mgmt/pkg_rmleaves sysutils/pkg_trackinst -> ports-mgmt/pkg_trackinst sysutils/pkg_tree -> ports-mgmt/pkg_tree sysutils/portbrowser -> ports-mgmt/portbrowser sysutils/portconf -> ports-mgmt/portconf sysutils/portdowngrade -> ports-mgmt/portdowngrade sysutils/portcheck -> ports-mgmt/portcheck sysutils/portmanager -> ports-mgmt/portmanager sysutils/portmaster -> ports-mgmt/portmaster sysutils/portscout -> ports-mgmt/portscout sysutils/portsearch -> ports-mgmt/portsearch sysutils/portsman -> ports-mgmt/portsman sysutils/portsnap -> ports-mgmt/portsnap sysutils/portsopt -> ports-mgmt/portsopt sysutils/portupgrade -> ports-mgmt/portupgrade sysutils/portupgrade-devel -> ports-mgmt/portupgrade-devel sysutils/port-authoring-tools -> ports-mgmt/port-authoring-tools sysutils/port-maintenance-tools -> ports-mgmt/port-maintenance-tools sysutils/psearch -> ports-mgmt/psearch sysutils/p5-FreeBSD-Portindex -> ports-mgmt/p5-FreeBSD-Portindex sysutils/qtpkg -> ports-mgmt/qtpkg textproc/p5-FreeBSD-Ports -> ports-mgmt/p5-FreeBSD-Ports Repocopies by: marcus
* Avoid unnecessary invocations of pkg_info by checking whether thesimon2006-04-162-1/+5
| | | | | | | | | | | | | package is installed or not using a precalculated regex. This speeds up "portaudit -a" with around a factor of 10. The change is slightly modified from the one from the PR by using pkg_info -aE instead of ls /var/db/pkg for determining installed packages. Submitted by: Kuang-che Wu <kcwu@csie.org> PR: ports/92942
* Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtryedwin2006-01-221-2/+2
| | | | | Approved by: krion@ PR: ports/88711 (related)
* Change MAINTAINER address for ports maintained by the Security Team tosimon2005-07-311-1/+1
| | | | | | secteam@ instead of security@ to make it more clear that the ports are not maintained by the freebsd-security@ mailing list. Both addresses go to the same people.
* portaudit 0.5.10:simon2005-07-043-16/+29
| | | | | | | | | | | | - Unbreak portaudit -vF. - Sync usage with reality. - Document the q, v, and V options. - Markup fixes for the portaudit(1) manual page. - Make quiet mode output even less "redundant" text [1]. - Set maintainership to security@. [2] Suggested by: Phil Kernick philk at rotfl dot com dot au [1] Suggested by: nectar, remko [2]
* Grab maintainer-ship of portaudit. While I do not currently have anysimon2005-06-151-1/+1
| | | | | | | plans for improvements (though I have ideas) I feel that portaudit is too important to not have an active maintainer. Approved by: portmgr (linimon)
* Typo-fix in a commentbrueffer2004-09-091-1/+1
| | | | Approved by: portmgr (krion)
* - update to version 0.5.9eik2004-09-043-14/+34
| | | | (first attempts to check the base system for vulnerabilities)
* fix "too many open files" error when using the -r flageik2004-08-242-2/+2
| | | | Noted by: nectar
* Don't check the base system when PACKAGE_BUILDINGeik2004-08-161-0/+2
|
* Remove -a from the default fetch(1) flags, so that the daily securityeik2004-08-152-2/+2
| | | | | | report is not delayed when the distribution site is down. Submitted by: kuriyama
* fix man page nits,eik2004-08-143-36/+61
| | | | | | | modify the vulnerability report depending on -q/-v (experimental) PR: 69935, 68942 Submitted by: Chris Pepper <pepper@reppep.com>, Johan Karlsson <k@numeri.campus.luth.se>
* New option -r: restrict listed entries to selected references.eik2004-07-243-4/+25
| | | | Useful for testing new entries.
* check for a working tr(1).eik2004-07-141-0/+5
|
* Test OSVERSION instead of pkg_info -P to enable cross-version buildseik2004-07-021-5/+2
| | | | Requested by: kris
* - update to version 0.5eik2004-07-0110-554/+442
| | | | | | | | | | | | | | | | *** NOTE *** The preferences file format has changed, as have the periodic.conf(5) names. Normally the default settings should be adequate, except when you need to configure a proxy. Use $PREFIX/etc/portaudit.conf.sample as an example. - moved portaudit to sbin - clean up, merging stuff into the portaudit script - better return codes and errors to stderr - -f can check stdin now - dropped ports tree auditing - merged the periodic(8) scripts into one - run daily auditing as `nobody'
* update to version 0.4.1eik2004-06-253-2/+30
| | | | | | Use portaudit [packagename ...] to check if package is listed as vulnerable
* Add pkg-req file which was forgotten in the last commit.eik2004-06-241-0/+27
|
* Update to version 0.4, with a new `-f' option.eik2004-06-243-42/+91
| | | | | | | | To check which of the current ports have known vulnerabilities, do portaudit -f /usr/ports/INDEX This port requires pkg_install(-devel)>=20040623
* make expiry date customizable via daily_status_portaudit_expiryeik2004-06-223-3/+3
|
* Fetch the database from http://www.FreeBSD.org/ports/ first.eik2004-06-184-6/+11
| | | | Thanks to: kuriyama
* update to 0.3.1:eik2004-04-015-18/+117
| | | | | | | | | - use passive ftp by default, don't retry on failure [1] - add a -C flag, portlint style - don't keep databases that are tool old [2] Requested by: hubs [1] Noticed by: Nicolas Rachinsky <nicolas@rachinsky.de> [2]
* Update to 0.3.eik2004-03-119-86/+145
| | | | | | | | | | | | | | | | Since we are using the official VuXML database the auditing should be pretty complete. - mention web page - add more mirrors, disabling .ru mirror (too much lag) - allow combined options in portaudit shell script - add sample configuration file - use absolute paths for binaries, to ease use in crontab scripts [1] - correct type in man page [2] PR: 64005 [2] Submitted by: Tomasz Pilat <poncki@axelspringer.com.pl> [1] Nathan Dove <njdove@wafer.sandia.gov> [2]
* grammareik2004-02-251-2/+2
| | | | Submitted by: will, nectar
* add a security contacteik2004-02-251-0/+7
|
* - bugfix: awk in -CURRENT accepts no regexes in RS, causing the databaseeik2004-02-254-3/+57
| | | | | | | | update to fail - add an install & deinstall message Submitted by: nectar & Ion-Mihai Tetcu <itetcu@apropo.ro>
* update to 0.2:eik2004-02-228-126/+480
| | | | | | | | - new command line tool - new man page - reworked database update code, incorporating feedback from Max Khon <fjoe>, Radim Kolar <hsn@netmag.cz> (PR 63066) and Ion-Mihai Tetcu <itetcu@apropo.ro> (PR 62655)
* Disable auditfile.txt until we decide on a database format,eik2004-02-191-53/+0
| | | | | | | | | | | two databases cause more confusion than it is worth. portaudit uses ports/security/vuxml/vuln.xml in the meantime, please commit your changes there and send feedback wich format you prefer. Currently we have to migrate gnats, mailman, monkey and some apache versions.
* add bind, pine, samba 3.xeik2004-02-171-0/+5
|
* remove duplicate mutt entry, sorry.eik2004-02-171-1/+0
|
* add mutt and mailmaneik2004-02-171-0/+2
|
* XFree86-Server font file buffer overflowseik2004-02-171-0/+2
|
* add GNATS3eik2004-02-161-0/+1
|
* require gaim version 0.75_6, since the vulnerability has been re-introducedeik2004-02-131-1/+4
| | | | add libtool symlink vulnerability
* add fspd <= 2.8.1.3eik2004-02-131-0/+1
| | | | | PR: 62747 Submitted by: Radim Kolar <hsn@netmag.cz>
* Add mutt < 1.4.2 vulnerabilty.clement2004-02-121-0/+1
|
* add an URL where at least somek kind of advisory for monkeyd can be found...eik2004-02-111-1/+1
|
* Add entries for:clement2004-02-111-0/+2
| | | | | - www/apache13-ssl<1.3.29.1.53 - www/monkey < 0.8.2
* add clamav<0.65_7eik2004-02-101-0/+1
| | | | PR: 62586
* Add some more examples (inn, apache) to test combined >= & < relationseik2004-01-291-1/+10
|
* portaudit provides a list of published security vulnerabilitieseik2004-01-287-0/+295
of FreeBSD ports and tools to check if installed ports are listed. Since this is a prerelease version, it is mostly usable for committers that want to contribute to the project, and can currently not be relied upon as an extensive security auditing tool.