On 1/4/19 7:45 pm, Klaus-J. Wolf wrote: > Hi you people, > > I am not a frequent reader of any list, so I ask for patience if I am > not familiar with info just recently discussed. > > From olden times, and from https://wiki.gentoo.org/wiki/GLSA I know a > tool called glsa-check. It was intended to check your system against > recent security advisories. > > I was surprised I couldn't find it anymore on my Gentoo system. But > stop, here it is: > > # find / -name glsa-check > /usr/lib64/portage/python3.6/glsa-check > /usr/lib64/portage/python2.7/glsa-check > > Really a strange place for a tool that "can be run by users" but anyway. > > But python3 /usr/lib64/portage/python3.6/glsa-check -l which should > display "all unapplied GLSA" gives me: All GLSAs, from the beginning. > > So, what happened here? A dead project? Why? > And if so, what replaced it? > > I hope you can help me. > > Best wishes to you - > > k.j.w.
It belongs to gentoolkit rattus ~ # equery b glsa-check * Searching for glsa-check ... app-portage/gentoolkit-0.4.2-r1 (/usr/bin/glsa-check -> ../lib/python-exec/python-exec2) app-portage/gentoolkit-0.4.2-r1 (/usr/lib/python-exec/python3.6/glsa-check) app-portage/gentoolkit-0.4.2-r1 (/usr/lib/python-exec/python2.7/glsa-check) sys-apps/portage-2.3.62 (/usr/lib/portage/python3.6/glsa-check) sys-apps/portage-2.3.62 (/usr/lib/portage/python2.7/glsa-check) rattus ~ # and -l doesnt mean what you think it does ... rattus ~ # glsa-check --help Syntax: glsa-check <option> [glsa-list] -l --list : list the GLSAs -d --dump : show all information about the GLSAs --print -t --test : test if this system is affected by the GLSAs -p --pretend : show the necessary steps to apply the GLSAs -f --fix : try to auto-apply the GLSAs (experimental) -i --inject : inject the given GLSA into the glsa_injected file -n --nocolor : disable colors (option) -e --emergelike : upgrade to latest version (not least-change, option) -h --help : show this help message -V --version : some information about this tool -v --verbose : print more information (option) -c --cve : show CVE ids in listing mode (option) -q --quiet : be less verbose and do not send empty mail (option) -m --mail : send a mail with the given GLSAs to the administrator glsa-list can contain an arbitrary number of GLSA ids, filenames containing GLSAs or the special identifiers 'all' and 'affected' rattus ~ # Try rattus ~ # glsa-check -t all This system is affected by the following GLSAs: 201705-10 rattus ~ # BillK
