summaryrefslogtreecommitdiff
path: root/pkgtools/pkg_install/files/audit-packages/audit-packages.conf.cat5.in
blob: f1de23a7a705265d0ca1291a5d2e5a33a2eaa152 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
audit-packages.conf(5)    NetBSD File Formats Manual    audit-packages.conf(5)

NNAAMMEE
     aauuddiitt--ppaacckkaaggeess..ccoonnff -- audit-packages and download-vulnerability-list
     configuration file.

DDEESSCCRRIIPPTTIIOONN
     The aauuddiitt--ppaacckkaaggeess..ccoonnff file contains the configuration information for
     download-vulnerability-list(8) and audit-packages(8).

     These variables can be defined in the audit-packages.conf(8) file.

     GPG            The full path to the location of the binary used to verify
                    the signature on the downloaded _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s file.
                    Currently only GnuPG is supported.

                    The default is "@prefix@/bin/gpg".

     PKGVULNDIR     Specifies the directory containing the _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s
                    file.

                    The default is "@pkgdbdir@".

     COMPRESS_TYPE  Specifies which type of compressed _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s
                    file to download.  You can also specify COMPRESS_TYPE=""
                    to use and uncompressed version of the file.  If you
                    change this from the default you must specify a COM-
                    PRESS_TOOL.  The currently accepted options are gzip and
                    bzip2.

     COMPRESS_TOOL  The full path to the location of the binary used to decom-
                    press the downloaded _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s file.

                    The default is "@gzcat@".

     FETCH_CMD      Specifies the client used to download the
                    _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s file.  Currently known tools include
                    curl, ftp, wget and fetch.

                    The default is @ftp@.

     FETCH_PRE_ARGS
                    Specifies optional arguments for the
                    _d_o_w_n_l_o_a_d_-_v_u_l_n_e_r_a_b_i_l_i_t_y_-_l_i_s_t client. These options appear
                    before FETCH_CMD.

     FETCH_ARGS     Specifies optional arguments for the client used to down-
                    load the _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s file.

     FETCH_PROTO    Specifies the protocol to use when fetching the
                    _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s file.  Currently supports only http
                    and ftp.

                    The default is "ftp".

     IGNORE_URLS    A list of vulnerability URLs to be ignored.  This allows
                    for ignoring certain URLs that are attached to a vulnera-
                    bility.

FFIILLEESS
     @sysconfdir@/audit-packages.conf

SSEEEE AALLSSOO
     pkg_info(1), mk.conf(5), pkgsrc(7), audit-packages(8) and _D_o_c_u_m_e_n_t_a_t_i_o_n
     _o_n _t_h_e _N_e_t_B_S_D _P_a_c_k_a_g_e _S_y_s_t_e_m

HHIISSTTOORRYY
     The aauuddiitt--ppaacckkaaggeess and ddoowwnnllooaadd--vvuullnneerraabbiilliittyy--lliisstt commands were origi-
     nally implemented and added to NetBSD's pkgsrc by Alistair Crooks on
     September 19, 2000.  During April 2007 aauuddiitt--ppaacckkaaggeess was re-written by
     Adrian Portelli and support was added for compressed files and checking
     signatures on downloaded files.  The original idea came from Roland
     Dowdeswell and Bill Sommerfeld.

NetBSD 3.1                       July 07, 2007                      NetBSD 3.1