portaudit -C

[Victor Sudakov]

Craig Rodrigues wrote:
> > > > >
> > > > > cd /usr/ports/net/asterisk11
> > > > > pkg audit `make -V PKGNAME`
> > > >
> > > > This requires that net/asterisk11 be already installed, doesn't it?
> > > >
> > >
> > > No.
> >
> > $
> > $ pwd
> > /var/poudriere/ports/default/www/squid
> > $ pkg audit `make -V PKGNAME`
> > 0 problem(s) in the installed packages found.
> > $
> >
> > I see the phrase "installed packages" there.
> >
> 
> The message from 'pkg audit' is wrong.  

Good to know, thank you.

> It parses /var/db/pkg/vuln.xml to
> list the vulnerabilities.
> If you give it an exact package name, it searches vuln.xml for that.  The
> package does not need to be installed.
> 
> For example:
> 
> pkg audit phpmyfaq-1.5.2
> 
-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru