From owner-freebsd-security@FreeBSD.ORG Fri Jan 23 23:14:21 2015 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E0615C5F for ; Fri, 23 Jan 2015 23:14:21 +0000 (UTC) Received: from mail-la0-f42.google.com (mail-la0-f42.google.com [209.85.215.42]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 665C11F8 for ; Fri, 23 Jan 2015 23:14:20 +0000 (UTC) Received: by mail-la0-f42.google.com with SMTP id ms9so174052lab.1 for ; Fri, 23 Jan 2015 15:14:13 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=lcqGJ9IWPN6OaQ6vJmWBm6WsiWTI8ItOw8JEhWXPfK0=; b=kDccDaLiWQWKXqWyBN3P29+baRbjq8s8GmR44LfReyv3aiiMasRUEbMdKYzesVWXpT vybnEZxABvvjoU3xdaiKEPpVJwtVzorhbRnh/hk29NmaDv31UYJSxrn/EByWVAekmfEU OQWYW3GE9vhEBSWf2RiZmlG0acENO5oqYNv/5tR+hyVvjFHNnuaF+XiRk7dKxybLKUF/ CFNj5VNdGl1NLGcN3XgX5cO4y7cDacT6yd5/yWpUD+0RNDTCHO7AeTmWgvdAQQ9t7uIF zjGk3PBnxwl40jjiqrHUrt1WNNvJjend/RBDQIzcXv2rEA2EfG1r5D1W7JqQjUrbJLw8 ZTmQ== X-Gm-Message-State: ALoCoQnoIS83DxyAJFAZWfx1ReXO4VBdbueMARScyxdbRvjgiJmiAvCoebHOsOMmiWOs/IcYNqoI X-Received: by 10.152.204.40 with SMTP id kv8mr9499904lac.42.1422054852921; Fri, 23 Jan 2015 15:14:12 -0800 (PST) MIME-Version: 1.0 Received: by 10.112.141.201 with HTTP; Fri, 23 Jan 2015 15:13:32 -0800 (PST) X-Originating-IP: [68.178.93.3] In-Reply-To: <20150123215738.GT80181@numachi.com> References: <21698.32224.747971.146491@khavrinen.csail.mit.edu> <20150123215738.GT80181@numachi.com> From: Leif Pedersen Date: Fri, 23 Jan 2015 17:13:32 -0600 Message-ID: Subject: Re: Strange package checksum report To: Garrett Wollman Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: "freebsd-security@freebsd.org" X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Jan 2015 23:14:22 -0000 I wonder if your computer's clock is off by a lot. Python might insist on rebuilding .pyc files if their timestamps are in the future. On Fri, Jan 23, 2015 at 3:57 PM, Brian Reichert wrote: > On Fri, Jan 23, 2015 at 11:59:12AM -0500, Garrett Wollman wrote: > > On some of my machines, I've been noticing the following in the > > nightly security mail: > > The *.pyc are blobs of byte code that Python generates if the > interpreter chooses to compile a module. > > Maybe the package erroneously contains them, and the interpreter > is regenerating them, according to whatever logic is would apply. > Maybe a timestamp issue? > > When you do a force reinstall ,what are the timestamps as compared > to the corresponding python modules (*.pl)? > > > > > > > Checking for packages with mismatched checksums: > > p5-XML-SAX-0.99_2: > /usr/local/lib/perl5/site_perl/XML/SAX/ParserDetails.ini > > python27-2.7.9: /usr/local/lib/python2.7/UserDict.pyc > > python27-2.7.9: /usr/local/lib/python2.7/_weakrefset.pyc > > python27-2.7.9: /usr/local/lib/python2.7/abc.pyc > > python27-2.7.9: /usr/local/lib/python2.7/codecs.pyc > > python27-2.7.9: /usr/local/lib/python2.7/copy_reg.pyc > > python27-2.7.9: /usr/local/lib/python2.7/encodings/__init__.pyc > > [ a bunch of other .pyc files elided ] > > > > Does anyone know what causes this? Force-reinstalling the package > > fixes it, but only temporarily -- by the time the next security mail > > comes, it's back in this state. > > > > -GAWollman > > > > _______________________________________________ > > freebsd-security@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-security > > To unsubscribe, send any mail to " > freebsd-security-unsubscribe@freebsd.org" > > -- > Brian Reichert > BSD admin/developer at large > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org > " > -- As implied by email protocols, the information in this message is not confidential. Any middle-man or recipient may inspect, modify, copy, forward, reply to, delete, or filter email for any purpose unless said parties are otherwise obligated. As the sender, I acknowledge that I have a lower expectation of the control and privacy of this message than I would a post-card. Further, nothing in this message is legally binding without cryptographic evidence of its integrity. http://bilbo.hobbiton.org/wiki/Eat_My_Sig