Package: debsums
Version: 2.0.37
Severity: important

The new daily cron script does not work correctly in the default
configuration.  See why:

--8<---------------cut here---------------start------------->8---
#!/bin/sh -e

debsums=/usr/bin/debsums
ignorefile=/etc/debsums-ignore

[ -x $debsums ] || exit 0

$debsums -cs 2>&1 | egrep -v "`cat $ignorefile`"
--8<---------------cut here---------------end--------------->8---

Be default /etc/debsums/ignore is empty, and an empty search pattern
matches every possible output of debsums, so the last command will never
print anything in this case.  Besides, the exit status of the script is
wrong, it will exit unsuccessfully if there are no matches.  Common
sense suggests to me that no matches = no modified files = success.

I also think that running this script on a daily basis is not a good
idea, since scanning every installed file takes a lot of time:

,----
| % time sudo /etc/cron.daily/debsums
| sudo /etc/cron.daily/debsums  15,16s user 16,21s system 13% cpu 3:57,14 total
`----


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26.5-libata
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages debsums depends on:
ii  debconf [debconf-2.0]         1.5.23     Debian configuration management sy
ii  perl                          5.10.0-14  Larry Wall's Practical Extraction 

debsums recommends no packages.

debsums suggests no packages.

-- debconf information:
* debsums/apt-autogen: false



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to