From owner-freebsd-security Fri Dec 15 18: 9:58 2000 From owner-freebsd-security@FreeBSD.ORG Fri Dec 15 18:09:56 2000 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from sunny.pacific.net.sg (sunny.pacific.net.sg [203.120.90.127]) by hub.freebsd.org (Postfix) with ESMTP id 4E6EA37B400 for ; Fri, 15 Dec 2000 18:09:55 -0800 (PST) Received: from pop1.pacific.net.sg (pop1.pacific.net.sg [203.120.90.85]) by sunny.pacific.net.sg with ESMTP id eBG29oo14422; Sat, 16 Dec 2000 10:09:51 +0800 (SGT) Received: from gchang (spoff250.pacific.net.sg [203.120.94.250]) by pop1.pacific.net.sg with SMTP id KAA05006; Sat, 16 Dec 2000 10:09:50 +0800 (SGT) Message-ID: <00a701c06704$9ae4f440$fa5e78cb@gchang> From: "James Lim" To: "Jeff Gentry" , "Mikhail Kruk" Cc: "Anil Jangity" , "jrz" , References: Subject: Re: Security Update Tool.. Date: Sat, 16 Dec 2000 10:05:03 +0800 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi all, Seems like today we have 2 ideas, ports autoupdate utility ( security checks too ) as well as for the src base itself? James Lim Technical Support Executive Pacific Internet Limited 89 Science Park Drive #02-05/06 The Rutherford Singapore 118261 Finger evilfry@sg.freebsd.org for PGP key. ----- Original Message ----- From: "Jeff Gentry" To: "Mikhail Kruk" Cc: "Anil Jangity" ; "jrz" ; Sent: Saturday, December 16, 2000 9:59 AM Subject: Re: Security Update Tool.. > On Fri, 15 Dec 2000, Mikhail Kruk wrote: > > I'm not sure that many people would like that kind of automation, but what > > is really missing IMHO is ability to mark ports whichs are insecure and > > add some option to pkg_info which will check all installed packages. I > > think OpenBSD has exacty this, no? > > I don't think it has to be automated *and* "behind the covers" ... > I think a 2 stage process would be good -> first stage figures out what > (if any) you need, and if possible, explains why. The 2nd stage would > allow you to apply changes if you wanted to or not. > > -- > Jeff Gentry jester@hexdump.org gentrj@hexdump.org > SEX DRUGS UNIX > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message