pkg/37608: audit-packages

[jam%pobox.com@localhost]

>Number:         37608
>Category:       pkg
>Synopsis:       audit-packages is placed under sbin, but pkgsrc requests it
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Mon Dec 24 19:55:00 +0000 2007
>Originator:     Kazushi (Jam) Marukawa
>Release:        NetBSD 4.99.44
>Organization:
        none, personal
>Environment:
System: NetBSD sou 4.99.44 NetBSD 4.99.44 (XEN3_DOMU) #0: Mon Dec 24 10:16:56 
JST 2007 
jam@fs:/usr/obj/mnt/raid/netbsd/20071223/src/sys/arch/i386/compile/XEN3_DOMU 
i386
Architecture: i386
Machine: i386
>Description:
        I have 3 requests.  These are what I noticed while I was
compiling several pkgsrc files.  I just thought some things are
strange, so I'm writing them as change requests.  I might be wrong.
If these requests are not strange, please just let me know.  No need
to change.

        One is about message from pkgsrc.  When I try to make some pkgsrc
files, it says I need to run download-vulnerability-list program.  Is it
possible to show something like "need to install pkg_install and run
download-vulnerrability-list?"  The message is OK for ppl who knows it.
However, it was hard to understand for ppl like me who doesn't know what
package the download-vulnerability-list belongs to.  Thanks.

        Second one is related to the one.  I installed security/audit-packages
since it seems to be the thing pkgsrc's vulnerability check system required.
I was wrong.  audit-packages doesn't work since it doesn't have -Q option.
I needed to install pkgtools/pkg_install.  It was easy if pkgsrc warning
message described it.  Is it possible to change the message like I wrote
in the request one?  Thanks.

        Third one is about the treatment of sbin.  The audit-packages is
installed into /usr/pkg/sbin.  However, I don't want to put /usr/pkg/sbin
directory in my PATH env-variable.  This is my policy.  A program placed
under sbin is for privileged users.  So, I don't want to put sbin in my
PATH env-variable.  However, pkgsrc makefiles require audit-packages by
default.  Is it possible to install audit-packages program into /usr/pkg/bin
instead of /usr/pkg/sbin?  Or, is it possible to write audit-packages
program with full path?

>How-To-Repeat:
        
>Fix:
        

>Unformatted:
        date is 20071223