can portaudit report a fixed date/version?
Dan Langille
dan at langille.org
Tue Oct 19 17:32:15 PDT 2004
On Tue, 19 Oct 2004, Jacques A. Vidrine wrote:
> > It would save many admins quite a bit of time.
>
> How so? (serious question)
I don't have time just now to answer the other questions but I can answer
this one.
Portaudit tells me that port xyz is vulnerable. But there there is no
fix. How do I know when there is a fix? Only by checking FreshPorts, cvs
logs, the ports tree, trying to install the port, portupgrade, etc. I
could do this daily for days without a fix.
Instead, if portaudit reported that port xyz is vulernable and that there
is a fix (if there actually is a fix), then all I need to do is monitor my
daily security email that automagically includes the output of portaudit.
I can then instantly know that it's time to run portupgrade on port xyz.
--
Dan Langille - http://www.langille.org/
BSDCan - The Technical BSD Conference: http://www.bsdcan.org/
More information about the freebsd-vuxml
mailing list