lang/go security problem on one but not the other
rkoberman at gmail.com
Wed Sep 2 20:01:14 UTC 2015
On Wed, Sep 2, 2015 at 11:30 AM, Rob Belics <robbelics at gmail.com> wrote:
> On Wed, Sep 2, 2015 at 1:12 PM, Kimmo Paasiala <kpaasial at gmail.com> wrote:
> > On Wed, Sep 2, 2015 at 8:13 PM, Rob Belics <robbelics at gmail.com> wrote:
> > > I found an updated vuln.xml in /usr/ports/security/vuxml/ dated today.
> > > will copy that over to /var/db/pkg/ but still question why that file
> > > not updated.
> > >
> > It's not updated by portsnap(8) but pkg-updating(8). Portmaster won't
> > update it either. There's a periodic(8) job that should update it
> > daily at /usr/local/etc/periodic/security/410.pkg-audit, controlled by
> > daily_status_security_pkgaudit_enable periodic.conf(5) setting that
> > defaults to YES.
> > -Kimmo
> Neither periodic.conf have anything in them but the one system I'm having
> trouble with was upgraded from FreeBSD 9.3, perhaps around the date
> vuln.xml now shows.
> periodic.conf is always empty by default. The default configuration is in
/etc/defaults/periodic.conf which, like all files in /etc/defaults, should
never be edited. Any changes from the default configuration go in
/etc/periodic.conf. Since periodic.conf is empty, the 410.pkg-audit script
should be running and the vuln.xml file should be getting updated. But it
Kevin Oberman, Network Engineer, Retired
E-mail: rkoberman at gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683
More information about the freebsd-ports