Portaudit - Revision history

Sidetone at 12:20, 18 December 2014

2014-12-18T12:20:00Z

77.233.245.145: how to install package even though it has vulnerabilities

2009-01-26T11:30:50Z

how to install package even though it has vulnerabilities

Jimbo: Reverted edits by 193.194.69.155 (Talk); changed back to last version by Ninereasons

2007-10-12T04:36:20Z

Reverted edits by 193.194.69.155 (Talk); changed back to last version by Ninereasons

Ninereasons at 18:33, 30 May 2006

2006-05-30T18:33:26Z

Ninereasons: redundant

2006-05-19T16:04:14Z

redundant

Ninereasons: re-organize the article

2006-05-19T15:56:53Z

re-organize the article

Ninereasons: redudundant

2006-05-18T22:04:08Z

redudundant

Ninereasons: fuller generic portaudit error message

2006-05-18T19:20:54Z

fuller generic portaudit error message

Ninereasons at 19:11, 18 May 2006

2006-05-18T19:11:27Z

New page

[[Category:Securing FreeBSD]][[Category:Ports and Packages]]
'''portaudit''' is a small FreeBSD [[ports|port]] that automatically maintains a database of known vulnerabilities. Installing this port creates and maintains the vulnerabilities database, and enables port security auditing on your system.

When you run <code>make</code> on a port, or use [[portupgrade]] or [[portmanager]], you may notice the mysterious but harmless warning that appears if you do not have port auditing enabled:
<pre>
===> Vulnerability check disabled, database not found

</pre>

''portaudit'' is installed to <code>/usr/local/etc/periodic/security/</code> by default, so that it will be run automatically, and will be part of the automated security report that is run by the system and mailed (by default) to the <code>root</code> user.

After port auditing is enabled, if you attempt to install a port with known vulnerabilities, you will not be able to install or upgrade the insecure port. Instead, you will receive a message that reads:
<pre>
===> package-version has known vulnerabilities:

</pre>

@@ Line 13: / Line 13: @@
 If you do not have port auditing enabled, you may notice the mysterious but harmless warning, when you run <code>make</code> on any port, or use [[portupgrade]] or [[portmanager]]:
 <pre>
 ===>  Vulnerability check disabled, database not found
@@ Line 26: / Line 27: @@
 portupgrade -m 'DISABLE_VULNERABILITIES=yes' <package>
 </pre>

← Older revision		Revision as of 11:30, 26 January 2009
Line 15:		Line 15:
	===> Vulnerability check disabled, database not found		===> Vulnerability check disabled, database not found

		+	</pre>
		+
		+	If for some reason you need to install a port even though it has know vulnerabilities, you can use the DISABLE_VULNERABILITIES make argument
		+	<pre>
		+	cd /usr/ports/foo/bar
		+	make -DDISABLE_VULNERABILITIES
		+	</pre>
		+	or using portupgrade
		+	<pre>
		+	portupgrade -m 'DISABLE_VULNERABILITIES=yes' <package>
	</pre>		</pre>

@@ Line 2: / Line 2: @@
 '''portaudit''' is a small FreeBSD [[ports|port]] that automatically creates and maintains a database of known vulnerabilities.  Installing this port enables port security auditing on your system.
-When you run <code>make</code> on a port, or use [[portupgrade]] or [[portmanager]], you may notice the mysterious but harmless warning that appears if you do not have port auditing enabled:
+After port auditing is enabled, you will not be able to install or upgrade an insecure port.  Instead, you will receive a message that reads:
-<pre>
-===>  Vulnerability check disabled, database not found
-−
-</pre>
-−
-''portaudit'' is installed to <code>/usr/local/etc/periodic/security/</code> by default, so that it will be run automatically, and will be part of the automated security report that is run by the system and mailed (by default) to the <code>root</code> user.
-−
-After port auditing is enabled, you will not be able to install or upgrade the insecure port.  Instead, you will receive a message that reads:
   ===>  ''package-version'' has known vulnerabilities:
   => ''package'' -- ''vulnerability summary''
@@ Line 16: / Line 8: @@
   => Please update your ports tree and try again.
   *** Error code 1

@@ Line 10: / Line 10: @@
 ''portaudit'' is installed to <code>/usr/local/etc/periodic/security/</code> by default, so that it will be run automatically, and will be part of the automated security report that is run by the system and mailed (by default) to the <code>root</code> user.
-After port auditing is enabled, if you attempt to install a port with known vulnerabilities, you will not be able to install or upgrade the insecure port.  Instead, you will receive a message that reads:
+After port auditing is enabled, you will not be able to install or upgrade the insecure port.  Instead, you will receive a message that reads:
-<pre>
+ ===>  ''package-version'' has known vulnerabilities:
-===>  package-version has known vulnerabilities:
+ => ''package'' -- ''vulnerability summary''
+   Reference: &tt;http://www.FreeBSD.org/ports/portaudit/''reference''.html>
-</pre>
+ => Please update your ports tree and try again.

@@ Line 11: / Line 11: @@
 ''portaudit'' is installed to <code>/usr/local/etc/periodic/security/</code> by default, so that it will be run automatically, and will be part of the automated security report that is run by the system and mailed (by default) to the <code>root</code> user.
-If you do not have port port auditing enabled, you may notice the mysterious but harmless warning, when you run <code>make</code> on an insecure port, or use [[portupgrade]] or [[portmanager]]:
+If you do not have port auditing enabled, you may notice the mysterious but harmless warning, when you run <code>make</code> on an insecure port, or use [[portupgrade]] or [[portmanager]]:
 <pre>
 ===>  Vulnerability check disabled, database not found
 </pre>

@@ Line 1: / Line 1: @@
 [[Category:Securing FreeBSD]][[Category:Ports and Packages]]
-'''portaudit''' is a small FreeBSD [[ports|port]] that automatically maintains a database of known vulnerabilities.  Installing this port creates and maintains the vulnerabilities database, and enables port security auditing on your system.
+'''portaudit''' is a small FreeBSD [[ports|port]] that automatically creates and maintains a database of known vulnerabilities.  Installing this port enables port security auditing on your system.
 When you run <code>make</code> on a port, or use [[portupgrade]] or [[portmanager]], you may notice the mysterious but harmless warning that appears if you do not have port auditing enabled: