From owner-freebsd-questions@freebsd.org Fri Nov 3 12:53:29 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1316BE5192C for ; Fri, 3 Nov 2017 12:53:29 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 88A16633B1 for ; Fri, 3 Nov 2017 12:53:27 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id vA3CrN8Y056164; Fri, 3 Nov 2017 23:53:24 +1100 (EST) (envelope-from smithi@nimnet.asn.au) Date: Fri, 3 Nov 2017 23:53:23 +1100 (EST) From: Ian Smith To: Yasuhiro KIMURA cc: freebsd-questions@freebsd.org Subject: Re: Three '450.status-security' scripts enabled by default In-Reply-To: Message-ID: <20171103233840.T7397@sola.nimnet.asn.au> References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Nov 2017 12:53:29 -0000 In freebsd-questions Digest, Vol 700, Issue 5, Message: 5 On Fri, 03 Nov 2017 03:12:32 +0900 (JST) Yasuhiro KIMURA wrote: > > OMG, again the source of this problem is "pkg". 410.pkg-audit and > > 460.pkg-checksum doesn't support security_status_*_period > > variable. Therefore they are always executed if > > weekly_status_security_enable and/or monthly_status_security_enable is > > 'YES' (and they are 'YES' by default). > > Support of security_status_*_period variable is added to these scripts > on GitHub repository. > > https://github.com/freebsd/pkg/commit/956dcc5f2205168d0ad321b6cc7c25cc473d2314 > https://github.com/freebsd/pkg/commit/cc27c8ce390b96f1fe649f3f5ce2150b2605ed41 > > Just FYI. Thanks. I'd asked Matthew Seaman off-list, who pointed to the first of those commits on github. I see you engaged Bapt@ about the second one. However these are not yet in the FreeBSD ports tree head, so presumably there will be a new version of pkg(8) coming along sometime after that. Amazing noine else seems to have noticed these extra security messages. cheers, Ian