From owner-freebsd-security Fri Dec 15 16:42:44 2000 From owner-freebsd-security@FreeBSD.ORG Fri Dec 15 16:42:42 2000 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from venus.entic.net (venus.entic.net [63.125.62.130]) by hub.freebsd.org (Postfix) with ESMTP id 153A937B400 for ; Fri, 15 Dec 2000 16:42:42 -0800 (PST) Received: (qmail 31137 invoked from network); 16 Dec 2000 00:42:40 -0000 Received: from mars.entic.net (qmailr@63.125.62.132) by venus.entic.net with SMTP; 16 Dec 2000 00:42:40 -0000 Received: (qmail 17420 invoked by uid 100); 16 Dec 2000 00:42:43 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 16 Dec 2000 00:42:43 -0000 Date: Fri, 15 Dec 2000 16:42:43 -0800 (PST) From: Anil Jangity To: jrz Cc: Subject: Re: Security Update Tool.. In-Reply-To: <20001216002828.519FB37B400@hub.freebsd.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I think he was looking for something a little more "automated". Something like IE's "Window's update" for freebsd ;-) I don't think its too difficult to do this, all you do is do ident on any binaries that are on the local system and compare the version with the version string in the advisories... the advisory might need some formatting changes? just thinking out loud. Fri, 15 Dec 2000 (4:41pm -0800) Message: @ >> My question is, is there a util yet that in theory (maybe if so, or if @ >> someone writes one would work differently than what I'm imagining) queries a @ >> central database with all the security advisories, checks the local system @ >> for comparisons and vulnerabilities against that database and reports to the @ >> user who ran the util. @ >> @ >> ie, sacheck -H sa-host.freebsd.org @ @ would be fairly easy to write a shell or perl script that checks for current @ advisories and prints it out in pretty format. @ @ -jrz @ @ @ @ --- @ Jacob Zehnder | Systems Engineer @ CNM Network | http://www.cnmnetwork.com @ business: jrz@cnmnetwork.com @ other: jrz@rackmount.org @ --- @ "Where am I, and what am I doing in this handbasket?" @ @ @ @ To Unsubscribe: send mail to majordomo@FreeBSD.org @ with "unsubscribe freebsd-security" in the body of the message @ @ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message