https://bugzilla.suse.com/show_bug.cgi?id=1218107 Bug ID: 1218107 Summary: AUDIT-0: cronie: D-Bus Services file changed /etc/cron.hourly/0anacron Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: ana.guerrero@suse.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- Looks like cronie needs an update (ref https://build.opensuse.org/request/show/1127725 ) Thank you! [ 15s] cron.x86_64: W: permissions-dir-without-slash /etc/cron.d [ 15s] cron.x86_64: W: permissions-dir-without-slash /etc/cron.daily [ 15s] cron.x86_64: W: permissions-dir-without-slash /etc/cron.hourly [ 15s] cron.x86_64: W: permissions-dir-without-slash /etc/cron.monthly [ 15s] cron.x86_64: W: permissions-dir-without-slash /etc/cron.weekly [ 15s] the entry in the permissions file refers to a directory. Please contact [ 15s] security@suse.de to append a slash to the entry in order to avoid security [ 15s] problems. Please refer to [ 15s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 15s] more information. [ 15s] [ 15s] cronie-anacron.x86_64: E: cron-file-digest-mismatch (Badness: 10000) /etc/cron.hourly/0anacron expected sha256:aa129d2165f669770b20d20fe5d826f242a069a8f9fc2323333b91d0c9ca40c9, has:884c2929d912e2c3ebdffee63159d922fc539c9a83643cc0fea809ced69e9fb3 [ 15s] cronie-anacron.x86_64: E: cron-file-digest-mismatch (Badness: 10000) /etc/cron.hourly/0anacron expected sha256:6e8a152a16e84ddc10e8ab1c2ed2bad28adbfc3b0b1ced62518c4ab0ada87220, has:884c2929d912e2c3ebdffee63159d922fc539c9a83643cc0fea809ced69e9fb3 [ 15s] A whitelisted cron job related file changed in content. Packaging cron jobs [ 15s] requires a review and whitelisting by the SUSE security team. If the package [ 15s] is intended for inclusion in any SUSE product please open a bug report to [ 15s] request review of the package by the security team. Please refer to [ 15s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 15s] more information. -- You are receiving this mail because: You are on the CC list for the bug.