SEC-UPDATER(8)

✨ SEC-UPDATER 💅 (that's the manual, bestie, section 8)

okay so picture this: sec-updater is the little guy who goes and digs up all the tea about security updates across Linux distributions. 🕵️♀️✨ That's literally the whole name, no notes: Extracts security update information of Linux distributions.

---

🌸 SYNOPSIS 🌸

sec-updater [--debug level] [--quiet] [--security] --os string --arch
            string --uri uri --file filename

sec-updater -h | --help

like, that's the whole vibe check right there. you feed it an OS, an arch, a uri and a file, and it goes to work. 👑

---

💖 DESCRIPTION 💖

so sec-updater pulls out information about security updates and backports from Linux repositories (think Debian or Ubuntu, the classics 🐧). and then — plot twist — that info gets used to update the package version information stored in the strongTNC SQLite database. yes, it's giving database glow-up. 💅

to figure out which package versions are actually affected by a given security update, it uses the dbkg --compare-versions command. that's the little judge deciding who's affected and who's fine. no cap. ⚖️✨

---

🎀 OPTIONS 🎀

• -h, --help — prints the usage information plus a short lil summary of the available commands. your emergency "wait what do I do" button. 🆘
• -v, --debug level — sets the debug level. default is 1. turn it up if you wanna see everything happening. 👀
• -q, --quiet — disables debug output to stderr. silence. shhh. 🤫
• -s, --security — set this when you're parsing a distribution's file that has security updates in it. 🛡️
• -o, --os string — name of the operating system (OS). for example `"Ubuntu 16.04". 🐧
• -o, --arch string — name of the HW architecture. for example "x86_64"</cyan>. yes, the page really does say -o` again for this one — that's what the manpage says, so that's what we're reporting, fr fr. 🤷♀️
• -o, --uri uri — the URI where to download the deb package from. 🌐
• -f, --file filename — the Linux package information file to parse. 📄

---

🌈 CONFIGURATION 🌈

these parameters can be configured in strongswan.conf — here's the whole thing, verbatim, don't come for me:

sec-updater {
  database = sqlite:///etc/pts/config.db
  swid_gen {
      command = /usr/local/bin/swid_generator
      tag_creator {
         name = strongSwan Project
         regid = strongswan.org
      }
   }
   tnc_manage_command = /var/www/tnc/manage.py
   tmp {
      deb_file = /tmp/sec-updater.deb
      tag_file = /tmp/sec-updater.tag
   }
}

it's giving config file realness. copy it, tweak it, live your truth. 🫶

---

👑 SEE ALSO 👑

• strongswan.conf(5) — go read that one too, bestie, it's the main character's bestie. 💜

---

lowkey important: everything above is exactly what the page says. don't invent extra flags, don't rename the -o situation, just vibe with it as written. 😌

---

and that's the whole thing!! 🎉 this was strongSwan 6.0.7, dated 2017-08-25, and the manual page is SEC-UPDATER(8) — slay, thanks for coming to my TED talk, mwah 💋💖🦋