From owner-freebsd-questions@FreeBSD.ORG Mon Nov 7 18:30:05 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E7F4E16A41F for ; Mon, 7 Nov 2005 18:30:05 +0000 (GMT) (envelope-from freebsd-questions@m.gmane.org) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6A7FD43D45 for ; Mon, 7 Nov 2005 18:30:04 +0000 (GMT) (envelope-from freebsd-questions@m.gmane.org) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1EZBi5-0006Sc-N8 for freebsd-questions@freebsd.org; Mon, 07 Nov 2005 19:27:13 +0100 Received: from r5k101.chello.upc.cz ([86.49.10.101]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 07 Nov 2005 19:27:13 +0100 Received: from martinkov by r5k101.chello.upc.cz with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 07 Nov 2005 19:27:13 +0100 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-questions@freebsd.org From: martinko Date: Mon, 07 Nov 2005 19:23:53 +0100 Lines: 37 Message-ID: References: <436E2F88.3010300@t-hosting.hu> <20051106204852.GB25399@ada.devbox.be> <20051106220942.GC904@zaphod.nitro.dk> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-2; format=flowed Content-Transfer-Encoding: 8bit X-Complaints-To: usenet@sea.gmane.org X-Gmane-NNTP-Posting-Host: r5k101.chello.upc.cz User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.12) Gecko/20050925 X-Accept-Language: sk, cs, en-gb, en-us, en In-Reply-To: <20051106220942.GC904@zaphod.nitro.dk> Sender: news Cc: freebsd-security@freebsd.org Subject: Re: What happened with portaudit? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Nov 2005 18:30:06 -0000 Simon L. Nielsen wrote: > On 2005.11.06 21:48:52 +0100, Jimmy Scott wrote: > >>On Sun, Nov 06, 2005 at 05:30:00PM +0100, Kövesdán Gábor wrote: >> >>>Hello, >>> >>>One of my machines I got a report about 3 vulnerable packages (php4, >>>ruby, openssl) in tomorrows security run output, but in today's security >>>run output all of them disappeared, but nobody upgraded or removed the >>>affected packages. I reinstalled portaudit, refreshd its database, but >>>now it reports 0 affected pakages. The pkg_info command lists that three >>>packages, so they are still installed. Does anybody suspect what's wrong? >> >>I noticed the same, but didn't had the time to look for a possible >>answer on that question. > > > It does seem to work for me now. Could people having this problem > please check the size of /var/db/portaudit/auditfile.tbz and try to > run portaudit -Fa to refetch the database and check again? > > For reference: > > [simon@zaphod:/tmp] ls -l /var/db/portaudit/auditfile.tbz > -r--r--r-- 1 root wheel 31762 6 Nov 22:40 /var/db/portaudit/auditfile.tbz > > There have been one previous report where a problem with the portaudit > database build resulted in an incomplete auditfile which was then > fixed after the next portaudit database rebuild. > it works now. and yes, i did portaudit -Fda several times during that day to no avail. m.