cvs commit: ports/security/portaudit-db/database portaudit.txt portaudit.xlist portaudit.xml

Oliver Eikemeier eikemeier at fillmore-labs.com
Tue Aug 17 13:59:30 PDT 2004


Oliver Eikemeier wrote:

> Tom Rhodes wrote:
>
>> BLAH!  The date from uname compaired to date of advisory.  Shit,
>> that only works for kernel.  Hmmm
>
> Conditionalizing on kernel version would be fine for me, but isn't this 
> the date when the kernel was compiled? The alternative seems to be to 
> bump __FreeBSD_version for security fixes, but this won't work for 
> patches. What is the problem with ident(1)? I seems like it was 
> invented for stuff like this.

OTOH `ident /usr/bin/cvs' won't help with the recent vulnerability :(



More information about the freebsd-vuxml mailing list