From owner-freebsd-ports@freebsd.org  Wed Jun 21 09:52:16 2017
Return-Path: <owner-freebsd-ports@freebsd.org>
Delivered-To: freebsd-ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6EEEBD8B40B
 for <freebsd-ports@mailman.ysv.freebsd.org>;
 Wed, 21 Jun 2017 09:52:16 +0000 (UTC) (envelope-from ml@netfence.it)
Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3])
 by mx1.freebsd.org (Postfix) with ESMTP id 5AF0F3081
 for <freebsd-ports@freebsd.org>; Wed, 21 Jun 2017 09:52:16 +0000 (UTC)
 (envelope-from ml@netfence.it)
Received: by mailman.ysv.freebsd.org (Postfix)
 id 5A271D8B40A; Wed, 21 Jun 2017 09:52:16 +0000 (UTC)
Delivered-To: ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 58387D8B408
 for <ports@mailman.ysv.freebsd.org>; Wed, 21 Jun 2017 09:52:16 +0000 (UTC)
 (envelope-from ml@netfence.it)
Received: from smtp206.alice.it (smtp206.alice.it [82.57.200.102])
 by mx1.freebsd.org (Postfix) with ESMTP id DEE9B307E
 for <ports@freebsd.org>; Wed, 21 Jun 2017 09:52:15 +0000 (UTC)
 (envelope-from ml@netfence.it)
Received: from soth.ventu (95.250.147.61) by smtp206.alice.it (8.6.060.28)
 (authenticated as acanedi@alice.it)
 id 5938655029DD88E3; Wed, 21 Jun 2017 11:52:07 +0200
Received: from alamar.ventu (alamar.local.netfence.it [10.1.2.18])
 by soth.ventu (8.15.2/8.15.2) with ESMTP id v5L9q6lf038515;
 Wed, 21 Jun 2017 11:52:07 +0200 (CEST) (envelope-from ml@netfence.it)
X-Authentication-Warning: soth.ventu: Host alamar.local.netfence.it
 [10.1.2.18] claimed to be alamar.ventu
From: Andrea Venturoli <ml@netfence.it>
To: ryanrfrederick@gmail.com, ports@freebsd.org
Subject: net-mgmt/nagios-check_ports and jails
Message-ID: <2cfd5c8c-b8b4-720a-5950-02bb59fe070b@netfence.it>
Date: Wed, 21 Jun 2017 11:52:05 +0200
User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:52.0) Gecko/20100101
 Thunderbird/52.2.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports/>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Jun 2017 09:52:16 -0000

Hello.

I can't seem to get net-mgmt/nagios-check_ports for jails to work.

Example:
> # pkg audit -F
> vulnxml file up-to-date
> 0 problem(s) in the installed packages found.
> # /usr/local/libexec/nagios/check_ports -j cacti 
> pkg: vulnxml file (null) does not exist. Try running 'pkg audit -F' first
> [: -gt: unexpected operator
> PORTS OK -  security problem(s). | total_updates=0;0;0 security_problems=;0;0
> # /usr/local/etc/periodic/security/410.jailaudit 
> 
> Downloading a current audit database:
> pkgng support enabled, using /usr/local/sbin/pkg version 1.10.1.
> 
> portaudit for jails on xxxx.xxxxx - 5 problem(s) found.
> 
> portaudit for jail: cacti (JID: 3)
> 
> apache24-2.4.25_1 is vulnerable:
> Apache httpd -- several vulnerabilities
> CVE: CVE-2017-7679
> CVE: CVE-2017-7668
> CVE: CVE-2017-7659
> CVE: CVE-2017-3169
> CVE: CVE-2017-3167
> WWW: https://vuxml.FreeBSD.org/freebsd/0c2db2aa-5584-11e7-9a7d-b499baebfeaf.html
> 
> 1 problem(s) found.
> ...

This host is using UFS and the jails on are created with EZJail.

Any hint?

  bye & Thanks
	av.