Bug ID | 914656 |
---|---|
Summary | seccheck in security repo won't run |
Classification | openSUSE |
Product | openSUSE Distribution |
Version | 13.2 |
Hardware | Other |
OS | openSUSE 13.2 |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Security |
Assignee | security-team@suse.de |
Reporter | werner.flamme@ufz.de |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
The mail I get from the /usr/lib/secchk/security-control.sh daily cron job shows errors: ---snip--- /usr/lib/secchk/helper.inc: line 46: guessable_password_email: command not found sed: can't read blurbs/guessable_passwd.txt: No such file or directory /usr/lib/secchk/helper.inc: line 49: syntax error near unexpected token `}' /usr/lib/secchk/helper.inc: line 49: `}' /usr/lib/secchk/helper.inc: line 46: guessable_password_email: command not found sed: can't read blurbs/guessable_passwd.txt: No such file or directory /usr/lib/secchk/helper.inc: line 49: syntax error near unexpected token `}' /usr/lib/secchk/helper.inc: line 49: `}' /usr/lib/secchk/security-daily.sh: line 64: check_for_globally_exported_fs: command not found /usr/lib/secchk/security-daily.sh: line 70: list_loaded_kernel_modules: command not found /usr/lib/secchk/security-daily.sh: line 73: nfs_mounted_with_missing_nosuid: command not found /usr/lib/secchk/security-daily.sh: line 76: display_programs_with_bound_sockets: command not found /usr/lib/secchk/security-control.sh: line 52: send_daily_changes: command not found ---pins--- A look into /usr/lib/secchk/ tells me that the file /usr/lib/secchk/blurbs/guessable_passwd.txt exists. Maybe the script changes the CWD before accessing the file? I went back to the seccheck package of the distro itself. But: in line 46 of helper.inc the () are missing behind 'function guessable_password_email', even in the distro version of seccheck. After fixing that, the script runs and generates the expected mail.