Date: Tue, 9 Apr 2013 17:36:29 +0000 (UTC) From: Eygene Ryabinkin <rea@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r315772 - in head/ports-mgmt/portaudit-db: . files Message-ID: <201304091736.r39HaTtE085192@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: rea Date: Tue Apr 9 17:36:29 2013 New Revision: 315772 URL: http://svnweb.freebsd.org/changeset/ports/315772 Log: Packaudit: switch to Subversion - use links to Subversion tree, HTTPS-flavored ones; - extract revision using Subversion format of $FreeBSD$; - refuse to work with vuln.xml that comes from CVS: automated exporter is switched off, so this source of vulnerabilities is stale. Reviewed by: simon, bz (partly), gavin Approved by: portmgr (tabthorpe), so (des), secteam (simon) Modified: head/ports-mgmt/portaudit-db/Makefile head/ports-mgmt/portaudit-db/files/packaudit.sh Modified: head/ports-mgmt/portaudit-db/Makefile ============================================================================== --- head/ports-mgmt/portaudit-db/Makefile Tue Apr 9 13:24:33 2013 (r315771) +++ head/ports-mgmt/portaudit-db/Makefile Tue Apr 9 17:36:29 2013 (r315772) @@ -7,7 +7,7 @@ PORTNAME= portaudit-db PORTVERSION= 0.2.3 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= ports-mgmt DISTFILES= Modified: head/ports-mgmt/portaudit-db/files/packaudit.sh ============================================================================== --- head/ports-mgmt/portaudit-db/files/packaudit.sh Tue Apr 9 13:24:33 2013 (r315771) +++ head/ports-mgmt/portaudit-db/files/packaudit.sh Tue Apr 9 17:36:29 2013 (r315772) @@ -67,8 +67,27 @@ fi TMPNAME=`$BASENAME "$0"` -VULVER=`$SED -En -e '/^.*\\$FreeBSD\: [^$ ]+,v ([0-9]+(\.[0-9]+)+) [^$]+\\$.*$/{s//\1/p;q;}' "$VUXMLDIR/vuln.xml"` -VULURL="http://cvsweb.freebsd.org/ports/security/vuxml/vuln.xml?rev=$VULVER" +# Is CVS still used for generation of VuXML entries? That's bad. +ISCVS=`$SED -En -e '/^.*\\$FreeBSD\: [^$ ]+\/vuln.xml,v ([0-9]+(\.[0-9]+)+) [^$]+\\$.*$/{s//\1/p;q;}' "$VUXMLDIR/vuln.xml"` +if [ -n "$ISCVS" ]; then + cat << EOF +File $VUXMLDIR/vuln.xml seem to come from CVS. + +CVS for FreeBSD ports is no longer synced with Subversion, so you will +get outdated vulnerability list. Please, check out your sources from +Subversion, refer to + http://www.freebsd.org/doc/handbook/svn.html +for the up to date instructions on how to actually do that. +EOF + exit 1 +fi + +VULPATH=`$SED -En -e '/^.*\\$FreeBSD\: ([^$ ]+\/vuln.xml) ([0-9]+) [^$]+\\$/{s//\1?revision=\2/p;q;}' "$VUXMLDIR/vuln.xml"` +if [ -z "$VULPATH" ]; then + echo "Can't determine origin and version of vuln.xml from $VUXMLDIR/vuln.xml" + exit 1 +fi +VULURL="https://svnweb.freebsd.org/ports/$VULPATH" [ -r "%%PREFIX%%/etc/packaudit.conf" ] && . "%%PREFIX%%/etc/packaudit.conf" @@ -90,7 +109,7 @@ fi TMPDIR=`$MKTEMP -d -t "$TMPNAME.$$"` || exit 1 TESTPORT="vulnerability-test-port>=2000<`$DATE -u +%Y.%m.%d`" -TESTURL="http://cvsweb.freebsd.org/ports/security/vulnerability-test-port/" +TESTURL="https://svnweb.freebsd.org/ports/head/ports-mgmt/vulnerability-test-port/" TESTREASON="Not vulnerable, just a test port (database: `$DATE -u +%Y-%m-%d`)" XLIST_FILE="$PORTAUDITDBDIR/database/portaudit.xlist"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201304091736.r39HaTtE085192>