From owner-freebsd-vuxml@FreeBSD.ORG  Tue Aug 17 20:59:30 2004
Return-Path: <owner-freebsd-vuxml@FreeBSD.ORG>
Delivered-To: freebsd-vuxml@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 8360B16A4CE; Tue, 17 Aug 2004 20:59:30 +0000 (GMT)
Received: from fillmore.dyndns.org (port-212-202-50-15.dynamic.qsc.de
	[212.202.50.15])	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 34ECB43D2F; Tue, 17 Aug 2004 20:59:30 +0000 (GMT)
	(envelope-from eikemeier@fillmore-labs.com)
Received: from dhcp-10.local ([172.16.0.10])
	by fillmore.dyndns.org with esmtp (TLSv1:DES-CBC3-SHA:168)
	(Exim 4.41 (FreeBSD))
	id 1BxB3G-0008F5-Vs; Tue, 17 Aug 2004 22:59:29 +0200
Date: Tue, 17 Aug 2004 23:01:15 +0200
Content-Type: text/plain; charset=US-ASCII; format=flowed
Mime-Version: 1.0 (Apple Message framework v482)
To: Oliver Eikemeier <eikemeier@fillmore-labs.com>
From: Oliver Eikemeier <eikemeier@fillmore-labs.com>
In-Reply-To: <2EA0165A-F090-11D8-A951-00039312D914@fillmore-labs.com>
Message-Id: <93C7E544-F090-11D8-A951-00039312D914@fillmore-labs.com>
Content-Transfer-Encoding: 7bit
User-Agent: KMail/1.5.9
cc: freebsd-vuxml@FreeBSD.org
cc: Tom Rhodes <trhodes@FreeBSD.org>
cc: Pete Fritchman <petef@absolutbsd.org>
cc: "Jacques A. Vidrine" <nectar@FreeBSD.org>
Subject: Re: cvs commit: ports/security/portaudit-db/database portaudit.txt
	portaudit.xlist portaudit.xml
X-BeenThere: freebsd-vuxml@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Documenting security issues in VuXML <freebsd-vuxml.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-vuxml>,
	<mailto:freebsd-vuxml-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-vuxml>
List-Post: <mailto:freebsd-vuxml@freebsd.org>
List-Help: <mailto:freebsd-vuxml-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-vuxml>,
	<mailto:freebsd-vuxml-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Aug 2004 20:59:30 -0000

Oliver Eikemeier wrote:

> Tom Rhodes wrote:
>
>> BLAH!  The date from uname compaired to date of advisory.  Shit,
>> that only works for kernel.  Hmmm
>
> Conditionalizing on kernel version would be fine for me, but isn't this 
> the date when the kernel was compiled? The alternative seems to be to 
> bump __FreeBSD_version for security fixes, but this won't work for 
> patches. What is the problem with ident(1)? I seems like it was 
> invented for stuff like this.

OTOH `ident /usr/bin/cvs' won't help with the recent vulnerability :(