I'd like to use "freebsd-update IDS" as a simple intrusion check. I have
a separate mechanism to test that
freebsd-update itself hasn't been modified.
However I get lots of lines like this:
/usr/share/man/man4/if_ixgbe.4.gz has S
! Make sure to run freebsd-update IDS to check the base OS's
checksums and if you're using pkgng you can use pkg check-s to look for
any tampered with files owned by packages.
Make sure you read the caveats in the freebsd-update manpage before
trusting the IDS result. At the very least you need
