[Bug 746042] New: Errrors in seccheck 2.0-670.3.1 Security-Check Scripts

newer
[Bug 768963] New: seccheck weekly...

bugzilla_noreply＠novell.com

9 Feb 2012 9 Feb '12

09:51

https://bugzilla.novell.com/show_bug.cgi?id=746042 https://bugzilla.novell.com/show_bug.cgi?id=746042#c0 Summary: Errrors in seccheck 2.0-670.3.1 Security-Check Scripts Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: i586 OS/Version: openSUSE 12.1 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: ainars.dambis@ast.lv QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 1.1.4322; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; NET4.0C; .NET4.0E) 1. RPM database check fails, MD5 flag ("5") now is in first position and not in third as in script (rpm -Va) 2. Mount points do not include ext4 mounts, so file related functions are skipped. Reproducible: Always Steps to Reproduce: run /usr/lib/secchk/security-control.sh weekly Actual Results: Zero lengt of: /var/lib/secchk/data/devices /var/lib/secchk/data/rpm-md5 Expected Results: device list in /var/lib/secchk/data/devices changed files in /var/lib/secchk/data/rpm-md5 # grep -n -C 2 -E "xfs \/|\^\.\.5|no_run-if-empty" /usr/lib/secchk/security-weekly.sh 43- 44-# get the ext2 and reiserfs mount points 45:MNT=`/bin/mount | awk '/ ext2 | reiserfs | ext3 | jfs | xfs / {print$3}' | grep -v "/media" | xargs -s 4000 echo "/dev/"` 46- 47-test -z "$MAILER" && test -x "/usr/sbin/sendmail" && MAILER="/usr/sbin/sendmail" -- 120- 121-# md5 check 122:nice -n 1 rpm -Va 2> /dev/null | grep '^..5' > "$SEC_DATA/rpm-md5.new" 123-diff -uw "$SEC_DATA/rpm-md5" "$SEC_DATA/rpm-md5.new" | \ 124- egrep -v '^\+\+\+ |^--- |^$|^@@' | sed 's/^[+-]/& /' > "$OUT" --------------------- repair: 1. look for line beginning with 5 sed -i "s/\^\.\.5/\^5/g" /usr/lib/secchk/security-weekly.sh 2. add "ext4" to MNT sed -i "s/ xfs \// xfs \| ext4 \//g" /usr/lib/secchk/security-weekly.sh -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

9 Feb 9 Feb

16:49

New subject: [Bug 746042] Errrors in seccheck 2.0-670.3.1 Security-Check Scripts

https://bugzilla.novell.com/show_bug.cgi?id=746042 https://bugzilla.novell.com/show_bug.cgi?id=746042#c Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |thomas@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13 Feb 13 Feb

07:36

New subject: [Bug 746042] Errrors in seccheck 2.0-670.3.1 Security-Check Scripts

https://bugzilla.novell.com/show_bug.cgi?id=746042 https://bugzilla.novell.com/show_bug.cgi?id=746042#c Thomas Biege changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low Status|NEW |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

31 May 31 May

14:29

New subject: [Bug 746042] Errrors in seccheck 2.0-670.3.1 Security-Check Scripts

https://bugzilla.novell.com/show_bug.cgi?id=746042 https://bugzilla.novell.com/show_bug.cgi?id=746042#c1 Thomas Biege changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #1 from Thomas Biege 2012-05-31 16:29:13 CEST --- Thanks for the detailed description. I submitted a new package to openSUSE:Factory.

...

osc request show 123087 Request: #123087

submit: home:thomasbiege:branches:security/seccheck(cleanup) -> security Message: fixed bnc#746042 for new rpm -Vs output and handle all fs types now If something doesn't work, please reopen this bug. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.