Portaudit
From FreeBSDwiki
(Difference between revisions)
Ninereasons (Talk | contribs) m (redudundant) |
Ninereasons (Talk | contribs) (re-organize the article) |
||
| Line 2: | Line 2: | ||
'''portaudit''' is a small FreeBSD [[ports|port]] that automatically creates and maintains a database of known vulnerabilities. Installing this port enables port security auditing on your system. | '''portaudit''' is a small FreeBSD [[ports|port]] that automatically creates and maintains a database of known vulnerabilities. Installing this port enables port security auditing on your system. | ||
| − | + | After port auditing is enabled, you will not be able to install or upgrade an insecure port. Instead, you will receive a message that reads: | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | After port auditing is enabled, you will not be able to install or upgrade | + | |
===> ''package-version'' has known vulnerabilities: | ===> ''package-version'' has known vulnerabilities: | ||
=> ''package'' -- ''vulnerability summary'' | => ''package'' -- ''vulnerability summary'' | ||
| Line 16: | Line 8: | ||
=> Please update your ports tree and try again. | => Please update your ports tree and try again. | ||
*** Error code 1 | *** Error code 1 | ||
| + | |||
| + | ''portaudit'' is installed to <code>/usr/local/etc/periodic/security/</code> by default, so that it will be run automatically, and will be part of the automated security report that is run by the system and mailed (by default) to the <code>root</code> user. | ||
| + | |||
| + | If you do not have port port auditing enabled, you may notice the mysterious but harmless warning, when you run <code>make</code> on an insecure port, or use [[portupgrade]] or [[portmanager]]: | ||
| + | <pre> | ||
| + | ===> Vulnerability check disabled, database not found | ||
| + | |||
| + | </pre> | ||
Revision as of 11:56, 19 May 2006
portaudit is a small FreeBSD port that automatically creates and maintains a database of known vulnerabilities. Installing this port enables port security auditing on your system.
After port auditing is enabled, you will not be able to install or upgrade an insecure port. Instead, you will receive a message that reads:
===> package-version has known vulnerabilities: => package -- vulnerability summary Reference: &tt;http://www.FreeBSD.org/ports/portaudit/reference.html> => Please update your ports tree and try again. *** Error code 1
portaudit is installed to /usr/local/etc/periodic/security/ by default, so that it will be run automatically, and will be part of the automated security report that is run by the system and mailed (by default) to the root user.
If you do not have port port auditing enabled, you may notice the mysterious but harmless warning, when you run make on an insecure port, or use portupgrade or portmanager:
===> Vulnerability check disabled, database not found
