https://bugzilla.novell.com/show_bug.cgi?id=746042 https://bugzilla.novell.com/show_bug.cgi?id=746042#c0 Summary: Errrors in seccheck 2.0-670.3.1 Security-Check Scripts Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: i586 OS/Version: openSUSE 12.1 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: ainars.dambis@ast.lv QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 1.1.4322; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; NET4.0C; .NET4.0E) 1. RPM database check fails, MD5 flag ("5") now is in first position and not in third as in script (rpm -Va) 2. Mount points do not include ext4 mounts, so file related functions are skipped. Reproducible: Always Steps to Reproduce: run /usr/lib/secchk/security-control.sh weekly Actual Results: Zero lengt of: /var/lib/secchk/data/devices /var/lib/secchk/data/rpm-md5 Expected Results: device list in /var/lib/secchk/data/devices changed files in /var/lib/secchk/data/rpm-md5 # grep -n -C 2 -E "xfs \/|\^\.\.5|no_run-if-empty" /usr/lib/secchk/security-weekly.sh 43- 44-# get the ext2 and reiserfs mount points 45:MNT=`/bin/mount | awk '/ ext2 | reiserfs | ext3 | jfs | xfs / {print$3}' | grep -v "/media" | xargs -s 4000 echo "/dev/"` 46- 47-test -z "$MAILER" && test -x "/usr/sbin/sendmail" && MAILER="/usr/sbin/sendmail" -- 120- 121-# md5 check 122:nice -n 1 rpm -Va 2> /dev/null | grep '^..5' > "$SEC_DATA/rpm-md5.new" 123-diff -uw "$SEC_DATA/rpm-md5" "$SEC_DATA/rpm-md5.new" | \ 124- egrep -v '^\+\+\+ |^--- |^$|^@@' | sed 's/^[+-]/& /' > "$OUT" --------------------- repair: 1. look for line beginning with 5 sed -i "s/\^\.\.5/\^5/g" /usr/lib/secchk/security-weekly.sh 2. add "ext4" to MNT sed -i "s/ xfs \// xfs \| ext4 \//g" /usr/lib/secchk/security-weekly.sh -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.