1 # $NetBSD: audit-packages.conf,v 1.1 2007/07/14 19:53:52 adrianp Exp $ 2 3 # 4 # sample configuration file for audit-packages(8) and 5 # download-vulnerability-list(8) 6 # 7 8 # GPG 9 # 10 # Specifies the full path to the gpg tool that will be used for verifying 11 # the signature on the downloaded pkg-vulnerabilities file. 12 # 13 # Used by: audit-packages download-vulnerability-list 14 # Supported: /path/to/gpg 15 # Default: GPG="/usr/pkg/bin/gpg" 16 17 # PKGVULNDIR 18 # 19 # Specifies the directory the pkg-vulnerabilities file is located in. 20 # 21 # Used by: audit-packages download-vulnerability-list 22 # Supported: /path/to/pkg-vulnerabilities/ 23 # Default: PKGVULNDIR="/var/db/pkg" 24 25 # COMPRESS_TYPE 26 # 27 # Specifies which type of compressed pkg-vulnerabilities file to 28 # download. You can also specify COMPRESS_TYPE="" to use 29 # and uncompressed version of the file. 30 # 31 # If you change this from the default you must specify a COMPRESS_TOOL. 32 # 33 # Used by: download-vulnerability-list 34 # Supported: gzip bzip2 (none) 35 # Default: COMPRESS_TYPE="gzip" 36 37 # COMPRESS_TOOL 38 # 39 # Specifies which tool will be used when dealing with the compressed 40 # pkg-vulnerabilities file. 41 # 42 # Used by: download-vulnerability-list 43 # Supported: Any local binary that can decompress the 44 # pkg-vulnerabilities file to stdout 45 # Default: COMPRESS_TOOL="/usr/bin/gzcat" 46 47 # FETCH_CMD 48 # 49 # Specifies the tool that will be used to fetch the pkg-vulnerabilities 50 # file. 51 # 52 # Used by: download-vulnerability-list 53 # Supported: /path/to/curl /path/to/ftp /path/to/wget /path/to/fetch 54 # Default: FETCH_CMD="/usr/bin/ftp" 55 56 # FETCH_ARGS 57 # 58 # Specifies optional arguments for the download-vulnerability-list client. 59 # 60 # Used by: download-vulnerability-list 61 # Supported: Any valid arguments for FETCH_CMD 62 # Default: FETCH_ARGS= 63 64 # FETCH_PROTO 65 # 66 # Specifies the protocol to use when fetching the pkg-vulnerabilities file. 67 # 68 # Used by: download-vulnerability-list 69 # Supported: ftp http 70 # Default: FETCH_PROTO="ftp" 71 72 # IGNORE_URLS 73 # 74 # A list of vulnerability URLs to be ignored. 75 # 76 # Used by: audit-packages 77 # Supported: Valid URL(s) from pkg-vulnerabilities 78 # Default: IGNORE_URLS= 79