Date: Thu, 30 Aug 2012 11:42:12 +0200 (CEST) From: freebsd@nagilum.org To: FreeBSD-gnats-submit@FreeBSD.org Cc: kensmith@FreeBSD.org Subject: misc/171180: make 460.chkportsum also report missing files Message-ID: <20120830094212.7481167908@cakebox.homeunix.net> Resent-Message-ID: <201208300950.q7U9o1Jj047080@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 171180
>Category: misc
>Synopsis: make 460.chkportsum also report missing files
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Aug 30 09:50:00 UTC 2012
>Closed-Date:
>Last-Modified:
>Originator: freebsd@nagilum.org
>Release: FreeBSD 10.0-CURRENT i386
>Organization:
>Environment:
System: FreeBSD cakebox.tis 10.0-CURRENT FreeBSD 10.0-CURRENT #0: Wed Aug 29 13:01:13 CEST 2012 root@cakebox.tis:/usr/obj/export/src/sys/net5501 i386
>Description:
The security daily script /etc/periodic/security/460.chkportsum
fails to notify if a file from a port is missing.
>How-To-Repeat:
1) add 'daily_status_security_chkportsum_enable="YES"' to
your /etc/periodic.conf
2) delete/rename a file that was installed via a port
3) run "/etc/periodic/security/460.chkportsum" or wait
for the daily security run output e-mail
>Fix:
Apply attached patch.
--- 460.chkportsum.patch begins here ---
--- /etc/periodic/security/460.chkportsum.old 2012-07-15 01:36:21.000000000 +0200
+++ /etc/periodic/security/460.chkportsum 2012-08-30 11:33:27.000000000 +0200
@@ -43,7 +43,7 @@
case "${daily_status_security_chkportsum_enable}" in
[Yy][Ee][Ss])
set -f
- pkg_info -ga 2>/dev/null | \
+ stdbuf -o L pkg_info -ga 2>&1 | \
while IFS= read -r line; do
set -- $line
case $1 in
@@ -55,7 +55,7 @@
;;
Mismatched|'') ;;
*) [ -n "${name}" ] &&
- echo "${name}: ${line%% fails the original MD5 checksum}"
+ echo "${name}: ${line%% fails the original MD5 checksum}"|sed -e 's/pkg_info: //' -e "s/doesn't\ exist/is\ missing/"
;;
esac
done
--- 460.chkportsum.patch ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120830094212.7481167908>