[WL::Techniek] [nodefactory] #247: Checking for packages with security vulnerabilities:

'WL Trac' noreply at wirelessleiden.nl
Wed Dec 19 09:05:57 UTC 2018


#247: Checking for packages with security vulnerabilities:
------------------------+-------------------------------------------
Reporter:  rick         |                    Owner:  nobody
    Type:  enhancement  |                   Status:  new
Priority:  minor        |                Milestone:  WL-11.2-RELEASE
Keywords:               |  Resource needed to  fix:
------------------------+-------------------------------------------
 Since we are post-removing files which are normally part of the package,
 this yields into errors on integrity checks. Some examples:

 {{{
 Checking for packages with mismatched checksums:
 GeoIP-1.6.12: missing file /usr/local/share/doc/GeoIP/COPYING
 GeoIP-1.6.12: missing file /usr/local/share/doc/GeoIP/ChangeLog
 GeoIP-1.6.12: missing file /usr/local/share/doc/GeoIP/LICENSE
 GeoIP-1.6.12: missing file /usr/local/share/doc/GeoIP/README.md
 apache24-2.4.37: missing file /usr/local/share/doc/apache24/BUILDING
 apache24-2.4.37: missing file /usr/local/share/doc/apache24/LICENSE
 apache24-2.4.37: missing file /usr/local/share/doc/apache24/NOTICE
 apache24-2.4.37: missing file /usr/local/share/doc/apache24/bind.html
 apache24-2.4.37: missing file /usr/local/share/doc/apache24/bind.html.de
 apache24-2.4.37: missing file /usr/local/share/doc/apache24/bind.html.en
 apache24-2.4.37: missing file
 /usr/local/share/doc/apache24/bind.html.fr.utf8
 ...
 }}}

 We should check whether we can reduce the image size by properly leaving
 out packages and/or compile packages without documentation options.

-- 
Ticket URL: <https://wirelessleiden.nl/projects/nodefactory/ticket/247>
nodefactory <http://www.wirelessleiden.nl/projects/nodefactory>
Wireless Leiden Node Factory


More information about the Techniek mailing list