Re: help with an audit-packages shell script

["Jeremy C. Reed" <reed%reedmedia.net@localhost>]

On Tue, 26 Aug 2008, Tonnerre Lombard wrote:

> === BEGIN /etc/security.local ===
> if [ -x /usr/pkg/sbin/download-vulnerability-list ]; then
>         /usr/pkg/sbin/download-vulnerability-list 2>&1 > /dev/null
> fi

What if continually errors and audit-packages always runs against old 
database?

There used to be a -q quiet switch. It would be good to save the output 
(but not all ftp details).

Also maybe don't check if /usr/pkg/sbin/download-vulnerability-list 
exists and just put in the same test -x /usr/pkg/sbin/audit-packages 
below (so if download-vulnerability-list is missing you will get an 
error):

> if [ -x /usr/pkg/sbin/audit-packages ]; then

         /usr/pkg/sbin/download-vulnerability-list 1>/dev/null
# maybe still get IPv6 no route warning though

>         /usr/pkg/sbin/audit-packages
> fi
> === END /etc/security.local