[TYPO3-caretaker] Security bulletin and 'unsecure extension' test

Martin Ficzel martin.ficzel at gmx.de
Thu Dec 3 23:09:11 CET 2009


Michiel Roos [netcreators] schrieb:
> Martin Ficzel schreef:
>> after another check i find that Caretaker works as expected. Just make
>> shure to add the ter-update cronjob and set the test intervals
>> accordingly. For extension-Security i suggest 4 or 6 hours as interval.
>> The ter-update cronjob has to run at least in the same interval to make
>> sense.
> 
> Hi Martin
> 
> I can only find the tasks 'get' and 'update' in the file
> caretaker/classes/class.tx_caretaker_Cli.php
> 

Hi Michiel,

the caretaker cli does provide the commands
update|get|update-extension-list|help.

So you update the extension list by:

php -f typo3/cli_dispatch.phpsh caretaker update-extension-list

Afterwards you can go to extMgm and check on the last date of the
extension list import.

This script needs to run regulary on the caretaker-server. The server is
requesting all extension keys and versions from the instances and is
comparing them with the list of insecure extension keys which was
updated from ter.

Regards Martin



> I can not find cliKeys in caretaker_instance
> 
> I don't get it.
> 
> ?
> 


More information about the TYPO3-project-caretaker mailing list