K 10
svn:author
V 5
simon
K 8
svn:date
V 27
2012-03-11T21:30:49.000000Z
K 7
svn:log
V 525
Make bsd.port.mk not parse port audit's auditfile directly to
check for vulnerabilities, but call portaudit instead.

This fixes a remote command execution vulnerability for users who have
portaudit installed.

While changing the code anyway, remove the annoying and very verbose
"Vulnerability check disabled, database not found" warning.

Security:	Remote code execution
Security:	http://vuxml.FreeBSD.org/6d329b64-6bbb-11e1-9166-001e4f0fb9b1.html
Approved by:	portmgr
Feature safe:	yes (or at least approved)
With hat:	so

END