On Fri, Aug 10, 2007 at 08:21:24AM -0400, Greg Troxel wrote:
> 1) download-vulnerability-list fails as a non-root user; it used to work
> if one could write /usr/pkgsrc/distfiles.

man audit-packages.conf

> 2) audit-packages writes to standard error.  It used to write to
> standard output (as I think it should), and it's documented to write to
> standard output.  I suspect this is just a bug.

What is it writing to standard error?

> As an aside, I have been feeling that /var/db/pkg isn't an appropriate
> place for the package database anyway - I'd like to see it under
> /usr/pkg.

pkgdb is the better place. This is volatile data internal to the pkg
tools.

Joerg