How FreeBSD makes vulnerability auditing easy: portaudit
reddit / BSD

----------------------------------------------------------------------
idontwanttortfm · 2009-06-03 02:08

Ah yes, I've set up a few boxes to run portaudit nightly (or was it
weekly?). It's a great way to stay on top of your installed ports.

----------------------------------------------------------------------
mordaunt0 · 2009-06-03 03:40

this makes as much sense as

"In windows update I trust"

Quote about the author:
"Chad Perrin is an IT consultant, developer, and freelance
professional writer. He holds both Microsoft and CompTIA
certifications and is a graduate of two IT industry trade schools. "

Ah ... makes sense

----------------------------------------------------------------------
deadbob · 2009-06-03 04:56

"portaudit checks installed packages for known vulnerabilities and
generates reports including references to security advisories."
Windows Updates does not do that.

----------------------------------------------------------------------
mordaunt0 · 2009-06-03 05:12

Who builds and updates the mystical db portaudit checks the installed
package versions against? How is this different from microsoft looking
up vulnerabilities they choose to acknowledge and include in their db.

The analogy seems obvious. I'm not sure why you're having trouble
seeing the similarity.

----------------------------------------------------------------------
[deleted] · 2009-06-03 05:27

[deleted]

----------------------------------------------------------------------
[deleted] · 2009-06-03 05:29

[deleted]

----------------------------------------------------------------------
[deleted] · 2009-06-03 06:15

[deleted]

----------------------------------------------------------------------
deadbob · 2009-06-03 14:51

What takeda64 said ^

----------------------------------------------------------------------
bsdboy · 2009-06-03 22:08

I dunno about this bsd stuff.