From owner-freebsd-pkg@FreeBSD.ORG  Mon Sep 22 10:15:45 2014
Return-Path: <owner-freebsd-pkg@FreeBSD.ORG>
Delivered-To: freebsd-pkg@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id F24564A3;
 Mon, 22 Sep 2014 10:15:44 +0000 (UTC)
Received: from relay2.tomsk.ru (mail.sibptus.tomsk.ru [212.73.124.5])
 by mx1.freebsd.org (Postfix) with ESMTP id 1F795DAA;
 Mon, 22 Sep 2014 10:15:43 +0000 (UTC)
X-Virus-Scanned: by clamd daemon 0.98.1 for FreeBSD at relay2.tomsk.ru
Received: from admin.sibptus.tomsk.ru (account sudakov@sibptus.tomsk.ru
 [212.73.125.240] verified)
 by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.16)
 with ESMTPSA id 36635255; Mon, 22 Sep 2014 17:15:41 +0700
Received: from admin.sibptus.tomsk.ru (sudakov@localhost [127.0.0.1])
 by admin.sibptus.tomsk.ru (8.14.9/8.14.7) with ESMTP id s8MAFdj1095071;
 Mon, 22 Sep 2014 17:15:41 +0700 (NOVT)
 (envelope-from vas@mpeks.tomsk.su)
Received: (from sudakov@localhost)
 by admin.sibptus.tomsk.ru (8.14.9/8.14.7/Submit) id s8MAFdKb095070;
 Mon, 22 Sep 2014 17:15:39 +0700 (NOVT)
 (envelope-from vas@mpeks.tomsk.su)
X-Authentication-Warning: admin.sibptus.tomsk.ru: sudakov set sender to
 vas@mpeks.tomsk.su using -f
Date: Mon, 22 Sep 2014 17:15:38 +0700
From: Victor Sudakov <vas@mpeks.tomsk.su>
To: Craig Rodrigues <rodrigc@freebsd.org>
Subject: Re: portaudit -C
Message-ID: <20140922101538.GA94283@admin.sibptus.tomsk.ru>
References: <20140921153841.GA75919@admin.sibptus.tomsk.ru>
 <CAG=rPVc9cC2-oSe_FAxkPTEWP-36YznowFcbtcx7s62y7YcObQ@mail.gmail.com>
 <20140922012612.GA81996@admin.sibptus.tomsk.ru>
 <CAG=rPVcgStOHU+W_ubjsbdCOBwKjPwkxhbExbPGnGJ5HXrx1xA@mail.gmail.com>
 <20140922085626.GA93280@admin.sibptus.tomsk.ru>
 <CAG=rPVe=zP2OjGyFXTHbSmsQeU5Jj_PLwgYG0y9WHcUEjvJ9cg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAG=rPVe=zP2OjGyFXTHbSmsQeU5Jj_PLwgYG0y9WHcUEjvJ9cg@mail.gmail.com>
Organization: AO "Svyaztransneft", SibPTUS
X-PGP-Key: http://www.dreamwidth.org/pubkey?user=victor_sudakov
X-PGP-Fingerprint: 10E3 1171 1273 E007 C2E9  3532 0DA4 F259 9B5E C634
User-Agent: Mutt/1.5.23 (2014-03-12)
Cc: freebsd-pkg@freebsd.org
X-BeenThere: freebsd-pkg@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Binary package management and package tools discussion
 <freebsd-pkg.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pkg>,
 <mailto:freebsd-pkg-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pkg/>
List-Post: <mailto:freebsd-pkg@freebsd.org>
List-Help: <mailto:freebsd-pkg-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pkg>,
 <mailto:freebsd-pkg-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Sep 2014 10:15:45 -0000

Craig Rodrigues wrote:
> > > > >
> > > > > cd /usr/ports/net/asterisk11
> > > > > pkg audit `make -V PKGNAME`
> > > >
> > > > This requires that net/asterisk11 be already installed, doesn't it?
> > > >
> > >
> > > No.
> >
> > $
> > $ pwd
> > /var/poudriere/ports/default/www/squid
> > $ pkg audit `make -V PKGNAME`
> > 0 problem(s) in the installed packages found.
> > $
> >
> > I see the phrase "installed packages" there.
> >
> 
> The message from 'pkg audit' is wrong.  

Good to know, thank you.

> It parses /var/db/pkg/vuln.xml to
> list the vulnerabilities.
> If you give it an exact package name, it searches vuln.xml for that.  The
> package does not need to be installed.
> 
> For example:
> 
> pkg audit phpmyfaq-1.5.2
> 
-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov@sibptus.tomsk.ru