cverules(1)

📦 version 4.0, in alpine 3.22, alpine 3.23, alpine 3.24, fedora 43, fedora 44

✨ cverules(1) — the cverules manual, bestie edition ✨

okay so real quick before we dive in: this is the manual for cverules, a lil script from the cvechecker universe. it's giving "quietly iconic helper energy" and honestly? we love her for it 💖

🌸 NAME 🌸

cverules — generate version matching rules for installed software on a Linux / Unix distribution 🐧✨

🦋 SYNOPSIS 🦋

cverules -r

that's it. that's the whole vibe. one flag. she's low maintenance 💅

🎀 DESCRIPTION 🎀

so what does this girl actually do? cverules goes and scans all the installed distribution packages on your system, and then it attempts to generate version matching rules — the kind that cvechecker can actually use 👑

and like, who is this for? literally anyone who wants to contribute to cvechecker's success 🫶 that's the target audience. if that's you, congrats, this is your moment, main character energy fr fr.

🍓 USAGE 🍓

💫 COMMAND USAGE 💫

the command requires a single option: -r. no more, no less. one option and you're out the door.

an example usage pattern looks exactly like this:

~$ cverules -r > output.txt

and then — okay this is the cute part — the generated output.txt file can be submitted to the cvechecker project, which lets it improve the versions.dat 🌈 like you're literally feeding the community, iconic behavior.

🔥 USABILITY 🔥

now, bestie, listen. the user should understand something important: this script attempts to generate matches, but it does not guarantee that each and every installed software is detected. no cap. here's the tea, in three parts:

  1. first of all — if a package is already matched by existing rules, the rest of that package's content isn't scanned anymore. why? because the tool's whole goal is to identify software and versions, and once one has been detected, further detection is less useful and very resource consuming. so she stops. efficient queen 💅
  2. second — if a package isn't detected properly, the script will see if the version based on the distribution's package version can be found. and if it can't? then it cannot identify the version properly and it just ignores the package. shrug emoji, we move on 🙈
  3. third — if the script does find a match for the version, it tries out a few regular expressions (which have a high probability rate to match the version) — but it has no intelligence to optimize the expressions. and if the tried expressions fail? the script will ignore the package. periodt 💀

👑 AUTHOR 👑

cverules is part of the cvechecker tool. cverules was written by Sven Vermeulen <sven.vermeulen@siphos.be> 🌟

✨ so yeah, that's the whole page bestie. go forth, run cverules -r, and submit that output.txt — you're literally helping the project eat 🫶

cverules(1) · cverules Manual · this page is dated November 25, 2010, with a release date of 1 December 2010 · bye bestie, mwah 💖🎀🦋

📦 where this page comes from