Mailinglist Archive: opensuse-bugs (4394 mails)

< Previous Next >
[Bug 695317] New: rkhunter cron script contains unquoted variable
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Sun, 22 May 2011 05:50:39 +0000
  • Message-id: <bug-695317-21960@http.bugzilla.novell.com/>

https://bugzilla.novell.com/show_bug.cgi?id=695317

https://bugzilla.novell.com/show_bug.cgi?id=695317#c0


Summary: rkhunter cron script contains unquoted variable
Classification: openSUSE
Product: openSUSE 11.4
Version: Factory
Platform: Other
OS/Version: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Basesystem
AssignedTo: bnc-team-screening@xxxxxxxxxxxxxxxxxxxxxx
ReportedBy: volker3204@xxxxxxxxxxxxxxx
QAContact: qa@xxxxxxx
Found By: ---
Blocker: ---


Created an attachment (id=430753)
--> (http://bugzilla.novell.com/attachment.cgi?id=430753)
Patch with fix

User-Agent: Mozilla/5.0 (compatible; Konqueror/4.6; Linux) KHTML/4.6.0
(like Gecko) SUSE

The mails sent by the rkhunter check script have a subject with random strings
because the corresponding variable in

/etc/cron.daily/suse.de-rkhunter

is missing proper quotes.
Not many variables in that script are quoted safely - not good IMHO for root
scripts.

Reproducible: Always

Steps to Reproduce:
1. Run /etc/cron.daily/suse.de-rkhunter
2. Look at resulting email

Actual Results:
Part of subject contains random string or is empty.

Expected Results:
The string intended to be there.

Fix in attached patch.

--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >