summaryrefslogtreecommitdiff
path: root/security/audit-packages/Makefile
AgeCommit message (Collapse)AuthorFilesLines
2004-06-06Update audit-packages to 1.32, with fixes for the problems mentionedagc1-2/+2
in PR 25654 from Hauke Fath. Take any non-standard values from audit-packages.conf file in audit-packages as well as download-vulnerability-list. Fix the pre-formatted documentation so that filenames to be substituted are not formatted with the bold or underline "overstrikes" on ttys, so that the correct sed substitutions take place at package install time.
2004-05-17Add explanation of -v switch to man page. (Okay'd by agc@.)reed1-2/+2
audit-packages version is now 1.31.
2004-04-14Make it a separate warning if downloading the filewiz1-2/+2
failed completely. Welcome to 1.30.
2004-04-11Rethink the nroff dilemma:jschauma1-13/+5
only regen on SunOS or AIX - the pre-generated pages _are_ mandoc type pages, so we can use them on more platforms than just Irix.
2004-04-09Do this the right way: regen audit-packages.0 and then substitute asjschauma1-3/+3
regular
2004-04-09Add a pre-formatted catman page which is only used (copied into place)jschauma1-1/+5
under IRIX. Other OS regen the catman page. This addresses PR pkg/23452. Since just depending on textproc/groff would pull in a large number of packages (such as perl, ghostscript, tiff etc.), and since this is a very important package that should NOT depend on all this gunk, Jeremy C. Reed suggested this solution. Ok agc.
2004-02-09Update security/audit-packages to 1.29. Changes from version 1.28 includejlam1-2/+2
supporting using the FreeBSD "fetch" command to get the vulnerabilities list. Patch provided in PR 24371 by Michal Pasternak.
2004-01-20Move WRKSRC definition away from the first paragraph in a Makefile.agc1-2/+2
2004-01-19This package never invokes the toolchain so it doesn't need buildlink[23].jlam1-2/+2
Define NO_BUILDLINK to signify this to bsd.pkg.mk.
2004-01-05bl3ifyjlam1-2/+7
2004-01-01Update audit-packages to 1.28.agc1-2/+2
By popular demand, add a -v switch to audit-packages(8) which enables the check for a package vulnerabilities file being unchanged for over 7 days. To enable the check, -v must be specified on the command line: % audit-packages % audit-packages -v *** WARNING - /usr/distfiles/pkg-vulnerabilities more than a week old, continuing... %
2003-12-12AIX doesn't have mandoc, just like SunOS.erh1-2/+2
2003-12-12Whitespace fix, cosmetic onlyagc1-2/+2
2003-12-11Update audit-packages to version 1.27.agc1-2/+2
Difference from previous version (1.26): + if the vulnerability list is older than a week, just display a warning message - don't consider this a fatal error.
2003-12-03Updated audit-packages to 1.26martti1-2/+3
Added support for audit-packages.conf. This file can be used to define environment variables (e.g. FETCH_ARGS).
2003-10-18Update audit-packages to 1.25.agc1-2/+2
+ get rid of unnecessary awk invocation in audit-packages, use shell construction instead, pointed out by enami tsugutomo. Cuts system and user execution times for audit-packages in half. + add (4-clause) licences to audit-packages and download-vulnerability-list + check integrity of pkg-vulnerabilities file in audit-packages by using the same construct as in download-vulnerability-list + CSE in error checking in audit-packages + properly terminate a case expression in download-vulnerability-list
2003-10-17Update audit-packages to 1.24:agc1-2/+2
Simplify quoting syntax in the awk command, so that gawk-3.1.3 (as found in NetBSD-current) doesn't have a problem with a malformed escape sequence. With thanks to Johnny Lam for testing with an older version of gawk.
2003-09-16Update audit-packages to 1.23.agc1-2/+2
Use the first word of ${FETCH_CMD} to determine which utility is used. Addresses PR 22760 from Todd Vierling.
2003-09-16Update audit-packages to 1.22:agc1-2/+2
Make an informational message clearer.
2003-09-12Update to version 1.21.seb1-2/+4
download-vulnerability-list(8) now needs digest(1). Hence put digest package as a runtime dependency of audit-packages package.
2003-09-09Update audit-packages to 1.20.agc1-2/+2
Support wget and curl as FETCH_CMDs, as discussed in PR 19103.
2003-09-03Fix inconsistent filename for "pkg-vulnerabilities" file intron1-2/+2
"audit-packages" script. Bump package version again.
2003-09-02Update audit-packages to 1.18.agc1-6/+12
Changes from previous version: + rely on an embedded sha1 digest to tell whether the vulnerabilities file has been damaged in transit or received successfully, rather than trusting that the file will not grow smaller + use the new filename "pkg-vulnerabilities" + use definitions from defs.${OPSYS}.mk in the download-vulnerability-list script + at installation time, don't rely on "ln -sf" to DTRT - explicitly call "rm -f" before attempting the symbolc link With thanks to seb@ for testing.
2003-08-22Update audit-packages to 1.17.agc1-2/+3
Instead of using the number of bytes to determine whether or not the file has shrunk, use the number of lines. This will allow for spelling corrections, login name of committers being shorter than others, etc. This is a temporary measure until a better distribution mechanism is used. Suggested by David Brownlee.
2003-07-21COMMENT should start with a capital letter.martti1-2/+2
2003-07-17s/netbsd.org/NetBSD.org/grant1-2/+2
2003-07-09Remove NO_MTREE=yesaymeric1-2/+1
It broke installation of audit-packages as the first package in the system. Okayed by Alistair.
2003-06-12-f the symlinks. Requested by Jeremy C. Reed.wiz1-3/+3
2003-06-12Add man page supplied by Jeremy C. Reed in PR 21865, with some fixes by me.wiz1-5/+22
Bump to 1.16.
2003-05-21Update to version 1.15.seb1-8/+7
The directory ${PKGVULNDIR)} holding the 'vulnerabilities' file which default value is determined at configure time can now be overridden at runtime from the environment. As a side effect the strings substituted at configure time in files/{audit-packages,download-vulnerability-list} are now of the form '@VAR@' and not '${VAR}'.
2003-04-25Make the PKGVULNDIR variable more generic, so one can choose where tojmmv1-3/+1
store the vulnerabilities file. This variable was already recognized by audit-packages but not by bsd.pkg.mk which hardcoded DISTDIR.
2003-03-29Place WRKSRC where it belongs, to make pkglint happy; ok'ed by wiz.jmmv1-2/+2
2002-07-04Add chmod a+r after downloading the new vulnerability file.wiz1-2/+2
Addresses part of pkg/17368. Bump to 1.14.
2002-06-04Make sure we get the grandchild output before the script exits.kim1-2/+2
2002-04-26Store vulnerabilities file in ${PKGVULNDIR} instead of ${DISTDIR}, in caselukem1-3/+5
the latter is not appropriate. The former defaults to the latter. Bump version to 1.12. Per discussion with Alistair Crooks.
2002-02-06Make sure this package installs properly. Pointed out in mail byagc1-2/+2
Toru TAKAMIZU <ttaka@ma1.seikyou.ne.jp>
2001-12-29Don't hardcode the PKG_DBDIR value at package installation time.agc1-3/+3
Bump version to 1.11
2001-06-25Apply patch from pkg/13295; seems not to hurt NetBSD, and should helpwiz1-2/+3
Solaris. Bump to 1.10.
2001-06-06Fix warning output if new file is smaller than old one.wiz1-2/+2
Noted by Kimmo Suominen. Bump to 1.9.
2001-04-27Update audit-packages to 1.8:agc1-2/+2
Fix a problem which occurs if the vulnerability list does not already exist. This fixes PR 12763 from Brian de Alwis (bsd@cs.ubc.ca), albeit in a slightly different manner. (I also added a check for the existence of the new vulnerabilities file, in case it was not downloaded for some reason).
2001-04-24Update to version 1.7 of audit-packages.agc1-2/+2
Incorporates the following changes from Anne Bennett (anne@alcor.concordia.ca) in PR 12538: (1) Running download-vulnerability-list as it stands from cron will spam the sysadmin with ftp output. Easy to fix: redirect output to /dev/null as per the example in pkg/MESSAGE. Problem: now we lose some error messages as well. Patch: make sure error complaints in that script are spouted to STDERR, not STDOUT. (3) Minor readability issue: set the source location for the vulnerability list in a variable at the top of the script. (4) PR 12457 reported that audit-packages complained spuriously when the vulnerability list had not been updated in over a week, and suggested touching it as a solution. This loses the information of when the file was really last updated. I'd prefer to always "mv" the new file into place, and use mtime instead of ctime in the file freshness test. I did this part of the PR differently, as I was worried about incomplete vulnerability lists being downloaded, and overwriting an existing vulnerability list: (2) ftp failure in download-vulnerability-list is not being detected properly by the current "${FETCH_CMD} .. || (complain; exit 1)" test. Patch: test for a non-zero vulnerability file instead. Don't forget to remove any zero-length droppings, if any. We know that the vulnerability list size will increase, and not decrease, so test the size of the newly-downloaded file. If the new file is smaller than the existing file, then a bad transfer has taken place - log this fact, and remove the new list.
2001-04-02Bump audit-packages to 1.6.agc1-2/+2
Always touch the downloaded vulnerability list, so that the audit-packages script doesn't moan erroneously. From Jim Bernard, in PR 12457.
2001-03-27Clean up temporary vulnerabilities file, if it's the same as the existingagc1-2/+2
one - addresses 2nd part of PR 12457, from Jim Bernard.
2001-03-20Update the download-vulnerability-list script to check for theagc1-4/+4
existence of ${DISTDIR}, and to create it if it doesn't exist. This is for machines built with binary packages, which lack pkgsrc, but this way preserves the location of the vulnerabilities file. Addresses PR 12367
2001-02-17Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.wiz1-1/+2
2000-11-11touch vulnerability list after update, to make audit-package happieritojun1-2/+3
when vulnerability list is not updated for more than a week. solves PR 11463 (there are other ways to solve this, i'm open to your opinion).
2000-10-26audit-packages 1.2:sommerfeld1-2/+2
check if vulnerabilities file is more than a week old, and whine if it is whine to stderr rather than stdout
2000-10-02Update to 1.1 - Give a slightly more friendly error message if vulnerabilitiesabs1-2/+2
file not present.
2000-09-19Initial import of a package to scan a vulnerability list, looking foragc1-0/+29
installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-19 18:42:45 +0000