From bc7876f394caa864ccc31e647b06f63d4def9736 Mon Sep 17 00:00:00 2001
From: Marc Fonvieille <blackend@FreeBSD.org>
Date: Sat, 3 Apr 2004 17:55:24 +0000
Subject: [PATCH] Document security/portaudit.

Submitted by:	Xin LI <delphij@frontfree.net>
---
 .../books/handbook/ports/chapter.sgml         | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/en_US.ISO8859-1/books/handbook/ports/chapter.sgml b/en_US.ISO8859-1/books/handbook/ports/chapter.sgml
index 6e25ffa7e6..d6072f4a33 100644
--- a/en_US.ISO8859-1/books/handbook/ports/chapter.sgml
+++ b/en_US.ISO8859-1/books/handbook/ports/chapter.sgml
@@ -218,6 +218,14 @@
       <para>Before installing any application, you should check <ulink
 	url="http://vuxml.freebsd.org/"></ulink> for security issues
 	related to your application.</para>
+
+      <para>You can also install <filename
+	role="package">security/portaudit</filename> which will
+	automatically check all installed applications for known
+	vulnerabilities, a check will be also performed before any port
+	build.  Meanwhile, you can use the command <command>portaudit
+	-F -a</command> after you have installed some
+	packages.</para>
     </warning>
 
     <para>The remainder of this chapter will explain how to use
@@ -754,6 +762,18 @@ R-deps: </screen>
 	  an up-to-date ports collection and you should check <ulink
 	  url="http://vuxml.freebsd.org/"></ulink> for security issues
 	  related to your port.</para>
+
+	<para>A security vulnerabilities check can be automatically
+	  done by <application>portaudit</application> before any new
+	  application installation.  This tool can be found in the
+	  ports collection (<filename
+	  role="package">security/portaudit</filename>).  Consider
+	  running <command>portaudit -F</command> before installing a
+	  new port, to fetch the current vulnerabilities database.  A
+	  security audit and an update of the database will be
+	  performed during the daily security system check.  For more
+	  informations read the &man.portaudit.1; and &man.periodic.8;
+	  manual pages.</para>
       </warning>
 
       <sect3 id="ports-cd">