From a97bcb2142e72e20f201ab2089bd8407f199670a Mon Sep 17 00:00:00 2001 From: Eric Light Date: Mon, 14 Mar 2016 12:02:18 +1300 Subject: [PATCH] Accept apt-get as a package audit tool --- include/tests_ports_packages | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/include/tests_ports_packages b/include/tests_ports_packages index 94c71b35..aac29229 100644 --- a/include/tests_ports_packages +++ b/include/tests_ports_packages @@ -877,13 +877,16 @@ if [ ${SKIPTEST} -eq 0 ]; then VULNERABLE_PACKAGES_FOUND=0 SCAN_PERFORMED=0 + # If apt-get is installed, then it's a reasonable option for a Package Audit tool + # If apt-check exists, it will be preferred and will overwrite the PACKAGE_AUDIT_TOOL setting + PACKAGE_AUDIT_TOOL="apt-get" + PACKAGE_AUDIT_TOOL_FOUND=1 # Update the repository, outdated repositories don't give much information LogText "Action: updating repository with apt-get" /usr/bin/apt-get -q=2 update LogText "Result: apt-get finished" LogText "Test: Checking if /usr/lib/update-notifier/apt-check exists" if [ -x /usr/lib/update-notifier/apt-check ]; then - PACKAGE_AUDIT_TOOL_FOUND=1 PACKAGE_AUDIT_TOOL="apt-check" LogText "Result: found /usr/lib/update-notifier/apt-check" LogText "Test: checking if any of the updates contain security updates"