portaudit question

[Kevin D. Kinsey, DaleCo, S.P.]

Thomas S. Crum - AAA Web Solution, Inc. wrote:

>Is there something that I am not updating that portaudit would like to see
>done or is this just a generic warning. Either way, please provide
>examples of what I might due to have it stop complaining. I can find no
>examples googling the portaudit "note" below.
>
>  
>
<snip some very helpful stuff, thanks Thomas!>

># Here's what I did next.
>
>man portaudit > no help
>pkg_delete cvsup-without-gui-16.1h
>cd /usr/ports/net/cvsup-without-gui
>make install clean
>/usr/local/sbin/portaudit -Fda > and get same output as above.
>
>Best,
>
>Thomas S. Crum
>  
>

You've gotten some good answers.  Please note
that cvs(1), which is in the "base system", is not
the same thing as cvsup(1), which is a port/package.

They pretty much *do* the same thing (well, a
_similar_ thing), but they aren't the same, so
de/reinstalling cvsup-without-gui wouldn't make
any difference; it's not where the problem was
anyway :-)

Portaudit seems like it will be/is a great tool;
I would also recommend subscribing to the
security-advisories list --- it's not like it's high
volume, <heh!*> , but you'd have seen this info
(re: CVS multiple vulnerability Advisory) almost
3 months ago....

Kevin Kinsey

*Just thinking, if M$ had such a list,
would the backbone "drown"? >:-s\