portaudit and cron

Hi folks!

Studying portaudit, I ask to myself: is it a good idea put to cron with notify by email if there are vulnerable packages? I did not find any how to that use this method. Is it a bad idea?

Thanks!
 
portaudit installs itself in the nightly system job runs. You will see an email after 03.00 every day.
 
Really? Where do I find that script? I looked in /etc/periodic/security and daily but I did not find it. Thanks.
 
Thanks! So portaudit sends an email only if there are vulnerabilities? I check the script 410.portaudit but I didn't find an option that sends the mail.

Thanks for your help :-)

Pol
 
The email gets sent by virtue of 410.portaudit being run (indirectly) from /etc/crontab. Cron job output gets mailed to root by default.

The 'chain of command' is /etc/crontab -> periodic daily -> /etc/defaults/periodic.conf -> local_periodic="/usr/local/etc/periodic" -> security -> 410.portaudit.
 
Back
Top