Date: Sat, 16 Dec 2000 10:05:03 +0800 From: "James Lim" <jameslpin@pacific.net.sg> To: "Jeff Gentry" <freebsd@hexdump.org>, "Mikhail Kruk" <meshko@cs.brandeis.edu> Cc: "Anil Jangity" <aj@entic.net>, "jrz" <jrz@cnmnetwork.com>, <security@FreeBSD.ORG> Subject: Re: Security Update Tool.. Message-ID: <00a701c06704$9ae4f440$fa5e78cb@gchang> References: <Pine.BSF.4.21.0012152058170.12122-100000@hellfire.hexdump.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi all, Seems like today we have 2 ideas, ports autoupdate utility ( security checks too ) as well as for the src base itself? James Lim Technical Support Executive Pacific Internet Limited 89 Science Park Drive #02-05/06 The Rutherford Singapore 118261 Finger evilfry@sg.freebsd.org for PGP key. ----- Original Message ----- From: "Jeff Gentry" <freebsd@hexdump.org> To: "Mikhail Kruk" <meshko@cs.brandeis.edu> Cc: "Anil Jangity" <aj@entic.net>; "jrz" <jrz@cnmnetwork.com>; <security@FreeBSD.ORG> Sent: Saturday, December 16, 2000 9:59 AM Subject: Re: Security Update Tool.. > On Fri, 15 Dec 2000, Mikhail Kruk wrote: > > I'm not sure that many people would like that kind of automation, but what > > is really missing IMHO is ability to mark ports whichs are insecure and > > add some option to pkg_info which will check all installed packages. I > > think OpenBSD has exacty this, no? > > I don't think it has to be automated *and* "behind the covers" ... > I think a 2 stage process would be good -> first stage figures out what > (if any) you need, and if possible, explains why. The 2nd stage would > allow you to apply changes if you wanted to or not. > > -- > Jeff Gentry jester@hexdump.org gentrj@hexdump.org > SEX DRUGS UNIX > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00a701c06704$9ae4f440$fa5e78cb>