| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
| |
- Remove support for FreeBSD older than 4.11 and 5.3.
- Remove conditional dependency on bzip2 which I can't really see how
could be activated automatically.
Reported by: "J. Martin Petersen" <jmp@alvorlig.dk> [1]
PR: ports/117845 [1]
With hat: maintainer / secteam
|
|
|
|
| |
"Sounds like a good idea": simon
|
|
|
|
|
| |
PR: ports/104813
Submitted by: Alan Amesbury <amesbury at umn dot edu>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
devel/portcheckout -> ports-mgmt/portcheckout
devel/portlint -> ports-mgmt/portlint
devel/portmk -> ports-mgmt/portmk
devel/porttools -> ports-mgmt/porttools
misc/instant-tinderbox -> ports-mgmt/instant-tinderbox
misc/porteasy -> ports-mgmt/porteasy
misc/portell -> ports-mgmt/portell
misc/portless -> ports-mgmt/portless
misc/tinderbox -> ports-mgmt/tinderbox
security/jailaudit -> ports-mgmt/jailaudit
security/portaudit -> ports-mgmt/portaudit
security/portaudit-db -> ports-mgmt/portaudit-db
security/vulnerability-test-port -> ports-mgmt/vulnerability-test-port
sysutils/barry -> ports-mgmt/barry
sysutils/bpm -> ports-mgmt/bpm
sysutils/kports -> ports-mgmt/kports
sysutils/managepkg -> ports-mgmt/managepkg
sysutils/newportsversioncheck -> ports-mgmt/newportsversioncheck
sysutils/pib -> ports-mgmt/pib
sysutils/pkgfe -> ports-mgmt/pkgfe
sysutils/pkg-orphan -> ports-mgmt/pkg-orphan
sysutils/pkg_cutleaves -> ports-mgmt/pkg_cutleaves
sysutils/pkg_install -> ports-mgmt/pkg_install
sysutils/pkg_install-devel -> ports-mgmt/pkg_install-devel
sysutils/pkg_remove -> ports-mgmt/pkg_remove
sysutils/pkg_rmleaves -> ports-mgmt/pkg_rmleaves
sysutils/pkg_trackinst -> ports-mgmt/pkg_trackinst
sysutils/pkg_tree -> ports-mgmt/pkg_tree
sysutils/portbrowser -> ports-mgmt/portbrowser
sysutils/portconf -> ports-mgmt/portconf
sysutils/portdowngrade -> ports-mgmt/portdowngrade
sysutils/portcheck -> ports-mgmt/portcheck
sysutils/portmanager -> ports-mgmt/portmanager
sysutils/portmaster -> ports-mgmt/portmaster
sysutils/portscout -> ports-mgmt/portscout
sysutils/portsearch -> ports-mgmt/portsearch
sysutils/portsman -> ports-mgmt/portsman
sysutils/portsnap -> ports-mgmt/portsnap
sysutils/portsopt -> ports-mgmt/portsopt
sysutils/portupgrade -> ports-mgmt/portupgrade
sysutils/portupgrade-devel -> ports-mgmt/portupgrade-devel
sysutils/port-authoring-tools -> ports-mgmt/port-authoring-tools
sysutils/port-maintenance-tools -> ports-mgmt/port-maintenance-tools
sysutils/psearch -> ports-mgmt/psearch
sysutils/p5-FreeBSD-Portindex -> ports-mgmt/p5-FreeBSD-Portindex
sysutils/qtpkg -> ports-mgmt/qtpkg
textproc/p5-FreeBSD-Ports -> ports-mgmt/p5-FreeBSD-Ports
Repocopies by: marcus
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
package is installed or not using a precalculated regex.
This speeds up "portaudit -a" with around a factor of 10.
The change is slightly modified from the one from the PR by using
pkg_info -aE instead of ls /var/db/pkg for determining installed
packages.
Submitted by: Kuang-che Wu <kcwu@csie.org>
PR: ports/92942
|
|
|
|
|
| |
Approved by: krion@
PR: ports/88711 (related)
|
|
|
|
|
|
| |
secteam@ instead of security@ to make it more clear that the ports are
not maintained by the freebsd-security@ mailing list. Both addresses
go to the same people.
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Unbreak portaudit -vF.
- Sync usage with reality.
- Document the q, v, and V options.
- Markup fixes for the portaudit(1) manual page.
- Make quiet mode output even less "redundant" text [1].
- Set maintainership to security@. [2]
Suggested by: Phil Kernick philk at rotfl dot com dot au [1]
Suggested by: nectar, remko [2]
|
|
|
|
|
|
|
| |
plans for improvements (though I have ideas) I feel that portaudit is
too important to not have an active maintainer.
Approved by: portmgr (linimon)
|
|
|
|
| |
Approved by: portmgr (krion)
|
|
|
|
| |
(first attempts to check the base system for vulnerabilities)
|
|
|
|
| |
Noted by: nectar
|
| |
|
|
|
|
|
|
| |
report is not delayed when the distribution site is down.
Submitted by: kuriyama
|
|
|
|
|
|
|
| |
modify the vulnerability report depending on -q/-v (experimental)
PR: 69935, 68942
Submitted by: Chris Pepper <pepper@reppep.com>, Johan Karlsson <k@numeri.campus.luth.se>
|
|
|
|
| |
Useful for testing new entries.
|
| |
|
|
|
|
| |
Requested by: kris
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
*** NOTE ***
The preferences file format has changed, as have the periodic.conf(5) names.
Normally the default settings should be adequate, except when you need to
configure a proxy. Use $PREFIX/etc/portaudit.conf.sample as an example.
- moved portaudit to sbin
- clean up, merging stuff into the portaudit script
- better return codes and errors to stderr
- -f can check stdin now
- dropped ports tree auditing
- merged the periodic(8) scripts into one
- run daily auditing as `nobody'
|
|
|
|
|
|
| |
Use
portaudit [packagename ...]
to check if package is listed as vulnerable
|
| |
|
|
|
|
|
|
|
|
| |
To check which of the current ports have known vulnerabilities, do
portaudit -f /usr/ports/INDEX
This port requires pkg_install(-devel)>=20040623
|
| |
|
|
|
|
| |
Thanks to: kuriyama
|
|
|
|
|
|
|
|
|
| |
- use passive ftp by default, don't retry on failure [1]
- add a -C flag, portlint style
- don't keep databases that are tool old [2]
Requested by: hubs [1]
Noticed by: Nicolas Rachinsky <nicolas@rachinsky.de> [2]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Since we are using the official VuXML database
the auditing should be pretty complete.
- mention web page
- add more mirrors, disabling .ru mirror (too much lag)
- allow combined options in portaudit shell script
- add sample configuration file
- use absolute paths for binaries, to ease use in crontab scripts [1]
- correct type in man page [2]
PR: 64005 [2]
Submitted by: Tomasz Pilat <poncki@axelspringer.com.pl> [1]
Nathan Dove <njdove@wafer.sandia.gov> [2]
|
|
|
|
| |
Submitted by: will, nectar
|
| |
|
|
|
|
|
|
|
|
| |
update to fail
- add an install & deinstall message
Submitted by: nectar & Ion-Mihai Tetcu <itetcu@apropo.ro>
|
|
|
|
|
|
|
|
| |
- new command line tool
- new man page
- reworked database update code, incorporating feedback from
Max Khon <fjoe>, Radim Kolar <hsn@netmag.cz> (PR 63066) and
Ion-Mihai Tetcu <itetcu@apropo.ro> (PR 62655)
|
|
|
|
|
|
|
|
|
|
|
| |
two databases cause more confusion than it is worth.
portaudit uses ports/security/vuxml/vuln.xml in the meantime,
please commit your changes there and send feedback wich format
you prefer.
Currently we have to migrate gnats, mailman, monkey and some
apache versions.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
add libtool symlink vulnerability
|
|
|
|
|
| |
PR: 62747
Submitted by: Radim Kolar <hsn@netmag.cz>
|
| |
|
| |
|
|
|
|
|
| |
- www/apache13-ssl<1.3.29.1.53
- www/monkey < 0.8.2
|
|
|
|
| |
PR: 62586
|
| |
|
|
of FreeBSD ports and tools to check if installed ports are listed.
Since this is a prerelease version, it is mostly usable for
committers that want to contribute to the project, and can currently
not be relied upon as an extensive security auditing tool.
|