Update watch files for polenum and acccheck

Raphael Hertzog hertzog at debian.org
Wed Nov 9 07:59:58 UTC 2016


Hi,

On Tue, 08 Nov 2016, Marcos Fouces wrote:
> > => this is definitely not a good fix, if the problem reported is true,
> > then it needs to be fixed at the glibc or kernel level, I suspect the
> > problem does no longer exist as we haven't gotten many "me too" in years
> > in that old bug report. Please revert that change and close the bug.
> I included this patch because i jbelieve that the test included doesn't
> create any trouble and it solves the issue.
> The submiter send it just a year ago (15 Jun 2015) so it is not so old.
> Anyway, i will revert and close the bug.

An infinite loop is always a potential issue, how does the script behave
if acct is disabled by way of policy-rc.d for example?

Or disable via /etc/default/acct?

Even if the check had been a good idea (it's not) parsing ls with awk to
get a size is not really clean. We have "stat" for that kind of queries.

> I will do the suggested changes and i'll test the package. In 2-3 weeks it
> should be ready.

We're getting closer to freeze and it's a new upstream version, we should
not wait too long either. No need for several weeks of testing, but manual
triggering of the modified cron scripts to check if they work is a good idea.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/



More information about the Pkg-security-team mailing list