Bug#403863: [Pkg-sysvinit-devel] Bug#403863: Cron <root@stfu> test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily

Henrique de Moraes Holschuh hmh at debian.org
Mon Mar 26 04:27:52 CET 2007


reassign 403863 chkrootkit
severity 403863 wishlist
retitle 403863 chkrootkit: please remove known false positives
thanks

On Sun, 25 Mar 2007, Binzberger Viktor wrote:
> The following suspicious files and directories were found:
> /lib/init/rw/.mdadm
> /lib/init/rw/.ramfs
> 
> Now this means that your approach is inconsistent with the use of 
> standard security tools within the same distribution. I'd like to ask 
> you to EITHER reconsider this strange new policy of putting hidden files 
> under /lib OR provide and maintain a patched version of chrootkit in the 
> distribution . Please, understand that I _don't_ want to recompile 
> chkrootkit, and also don't want to write a wrapper around it to supress 
> these messages, and I suspect that I'm not alone with this desire.

Sure thing.  chkrootkit will have to stop annoying people about this stuff
under /lib/init/rw.  It is already annoying people about other dotfiles and
the threads about it on d-devel were quite clear that the dotfiles will
stay (I don't appreciate these dot-files either, but...).

This bug is a "wontfix" on the sysvinit side for the time being, and even if
we do change it later on for some other reason, chkrootkit would still annoy
people over the other dotfiles from other packages.  Thus, I am reassigning
this bug to chkrootkit.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh




More information about the Pkg-sysvinit-devel mailing list