On Wed, 2006-01-18 at 13:43 +0100, Reinhard Tartler wrote: > Am Dienstag, den 17.01.2006, 20:05 +0100 schrieb Florian Weimer: > > I see you've somehow included the debsecan package in Ubuntu: > > > > <https://launchpad.net/distros/ubuntu/+source/debsecan> > > > > In order to work properly, debsecan needs detailed vulnerability > > information--which is currently not available for Ubuntu. That's why > > I think you should remove this package from your distribution. > > Thank you for your notice. Does anyone has objections to remove this > package or does anyone intend to work on it so it becomes useful on > ubuntu systems? If not I'd agree to Florian and would request removal of > debsecan >
This looks like it could a be really useful program (well at least to me anyway), but I've taken a look at the source package, and I can't find any instructions on how one would generate vulnerability information for it from Ubuntu (or other derivatives). Florian, would you happen to have instructions on how to generate this data ? Presumably it would need access to the Ubuntu build infrastructure to do this, but it seems to be a useful security tool. Martin, assuming we can generate a data feed, what do you think ? Would you use it ? Regards -- Jamie Jones Proprietor E-Yagi Consulting ABN: 32 138 593 410 Mob: +61 4 16 025 081 Email: [EMAIL PROTECTED] Web: http://www.eyagiconsulting.com GPG/PGP signed mail preferred. No HTML mail. No MS Word attachments PGP Key ID 0x4B6E7209 Fingerprint E1FD 9D7E 6BB4 1BD4 AEB9 3091 0027 CEFA 4B6E 7209
signature.asc
Description: This is a digitally signed message part
-- Ubuntu-motu mailing list [email protected] http://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
