#! /bin/sh
# $NetBSD: audit-packages,v 1.7 2001/12/29 10:07:31 agc Exp $

if [ ! -f /usr/pkgsrc/distfiles/vulnerabilities ] ;then
    echo "** Missing /usr/pkgsrc/distfiles/vulnerabilities" 1>&2
    echo "** run download-vulnerability-list" 1>&2
    exit 1
fi

if [ -n "$(find /usr/pkgsrc/distfiles/vulnerabilities -ctime +7)" ]
then
    echo "** /usr/pkgsrc/distfiles/vulnerabilities more than a week old" 1>&2
    echo "** run download-vulnerability-list" 1>&2
    exit 1
fi

/usr/bin/awk '
	/^#.*/ { next }
	NF == 0 { next }
	{ cmd = sprintf("/usr/sbin/pkg_info -qe \"%s\" && echo Package \"`/usr/sbin/pkg_info -e '\''%s\'\''`\" has a %s vulnerability, see %s", $1, $1, $2, $3);
	  system(cmd); }
' /usr/pkgsrc/distfiles/vulnerabilities

exit 0
