misc/46757:

[ef%math.uni-bonn.de@localhost]

>Number:         46757
>Category:       misc
>Synopsis:       
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    misc-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Mon Jul 30 15:30:00 +0000 2012
>Originator:     Edgar Fuß
>Release:        NetBSD 6.0_BETA2
>Organization:
        Mathematisches Institut der Uni Bonn
>Environment:
        
        
System: NetBSD trave.math.uni-bonn.de 6.0_BETA2 NetBSD 6.0_BETA2 (MI12serv) #5: 
Mon Jul 30 12:13:14 CEST 2012 
support%trave.math.uni-bonn.de@localhost:/usr/obj/sys/arch/amd64/compile/mi12serv
 amd64
Architecture: x86_64
Machine: amd64
>Description:
        It's somewhat annoying that NetBSD, as shipped by NetBSD, by default,
        sets fetch_pkg_vulnerabilities=NO in /etc/defaults/daily.conf, while, 
by default.
        on a daily basis, lets /etc/daily urge me to change that default.
>How-To-Repeat:
        Code inspection. Read daily mails.
        See also discussion on tech-userlevel.
>Fix:
        Warn only fetch_pkg_vulnerabilities is unset/empty and make that
        the default in /etc/defaults/daily.conf.
        Perhaps some native speaker should adjust my wording in the 
echo/comment.

--- daily.orig  2012-07-30 17:15:38.000000000 +0200
+++ daily       2012-07-30 17:20:27.000000000 +0200
@@ -254,9 +254,10 @@
        if checkyesno fetch_pkg_vulnerabilities; then
                ( umask 022 && pkg_admin ${_compat_K_flag} \
                    fetch-pkg-vulnerabilities -u )
-       else
-               echo "fetch_pkg_vulnerabilities is set to NO in daily.conf(5)."
-               echo "You should set it to YES to enable vulnerability checks."
+       elif [ -z "$fetch_pkg_vulnerabilities" ]; then
+               echo "fetch_pkg_vulnerabilities is not set in daily.conf(5)."
+               echo "You should set it to YES to enable vulnerability checks"
+               echo "or set it to NO to get rid of this warning."
        fi
 fi
 
--- daily.conf.orig     2012-07-30 17:15:48.000000000 +0200
+++ daily.conf  2012-07-30 17:17:27.000000000 +0200
@@ -30,6 +30,6 @@
 run_security=YES
 separate_security_email=YES
 run_skeyaudit=YES
-fetch_pkg_vulnerabilities=NO
+fetch_pkg_vulnerabilities="" # set to NO to disable and not be warned about
 
 send_empty_security=NO

>Unformatted: