Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Sep 2015 21:12:44 +0300
From:      Kimmo Paasiala <kpaasial@gmail.com>
To:        Rob Belics <robbelics@gmail.com>
Cc:        FreeBSD Ports ML <freebsd-ports@freebsd.org>
Subject:   Re: lang/go security problem on one but not the other
Message-ID:  <CA%2B7WWScn2F6%2BkG3YctMQ6c_QiF8grh8rfQBMYQ6fGc4WdwxiWA@mail.gmail.com>
In-Reply-To: <CAPu-kW_jsUvfAW-_FzK-sr_e-PF0n0=3Z%2B%2Bu8vcWUjhp4jm_Ew@mail.gmail.com>
References:  <CAPu-kW_jsUvfAW-_FzK-sr_e-PF0n0=3Z%2B%2Bu8vcWUjhp4jm_Ew@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Sep 2, 2015 at 8:13 PM, Rob Belics <robbelics@gmail.com> wrote:
> I found an updated vuln.xml in /usr/ports/security/vuxml/ dated today. I
> will copy that over to /var/db/pkg/ but still question why that file was
> not updated.
>

It's not updated by portsnap(8) but pkg-updating(8). Portmaster won't
update it either. There's a periodic(8) job that should update it
daily at /usr/local/etc/periodic/security/410.pkg-audit, controlled by
daily_status_security_pkgaudit_enable periodic.conf(5) setting that
defaults to YES.

-Kimmo



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2B7WWScn2F6%2BkG3YctMQ6c_QiF8grh8rfQBMYQ6fGc4WdwxiWA>