#1136544 openscap uses pidof but does not depend on procps

#1136544#5
Date:
2026-05-13 23:30:07 UTC
From:
To:
Dear maintainer(s) of openscap,

it appears that openscap uses `pidof` in its testsuite, or that
at least one of its binary packages uses `pidof` at runtime.
Historically, `pidof` was provided by the Essential package
`sysvinit-tools`, making an explicit dependency unnecessary. However
`pidof` will soon be moved to `procps` and will no longer be part of
the Essential set.

Please add an explicit dependency on `procps`:

* via the `Depends:` field of all binary packages of openscap
  that use `pidof` at runtime;
* via the `Build-Depends:` field of openscap, if `pidof` is
  used in tests run at build-time;
* via the `Depends:` field of `debian/control/tests`, if `pidof` is
  used in autopkgtests.

To prevent any disruption for users of openscap, please add
this dependency now, before `pidof` is moved from `sysvinit-utils` to
`procps`. Alternatively, you could remove all uses of `pidof`.

It is believed that openscap uses `pidof` due to the following
code snippets:

```
path: openscap_1.4.3+dfsg-1/tests/probes/systemdunitdependency/test_probes_systemdunitdependency.sh
function test_probes_systemdunitdependency {
    probecheck "systemdunitdependency" || return 255
    pidof systemd > /dev/null || return 255
    systemctl > /dev/null 2>&1 || return 255


path: openscap_1.4.3+dfsg-1/tests/oval_details/test_oval_details.sh
test_run "test_oval_details_rpminfo_object_implicit" test_oval_details_implicit rpminfo "name.*release.*version" "rpm"
test_run "test_oval_details_rpminfo_object_explicit" test_oval_details_explicit rpminfo "name.*release.*version" "rpm"
if ! pidof systemd > /dev/null ; then
  test_run "test_oval_details_runlevel_object_implicit" test_oval_details_implicit runlevel "service name.*runlevel" "smartd"
  test_run "test_oval_details_runlevel_object_explicit" test_oval_details_explicit runlevel "service name.*runlevel" "smartd"


path: openscap_1.4.3+dfsg-1/tests/probes/systemdunitproperty/test_probes_systemdunitproperty_offline_mode.sh
    probecheck "systemdunitproperty" || return 255
    pidof systemd > /dev/null || return 255
    local ret_val=0;


path: openscap_1.4.3+dfsg-1/tests/probes/systemdunitproperty/test_probes_systemdunitproperty.sh
function test_probes_systemdunitproperty {
    probecheck "systemdunitproperty" || return 255
    pidof systemd > /dev/null || return 255
    systemctl > /dev/null 2>&1 || return 255


path: openscap_1.4.3+dfsg-1/tests/probes/systemdunitdependency/test_probes_systemdunitdependency_offline_mode.sh
    probecheck "systemdunitdependency" || return 255
    pidof systemd > /dev/null || return 255
    local ret_val=0;


path: openscap_1.4.3+dfsg-1/tests/probes/systemdunitproperty/test_probes_systemdunitproperty_mount_wants.sh
function test_probes_systemdunitproperty_mount_wants {
    probecheck "systemdunitproperty" || return 255
    pidof systemd > /dev/null || return 255
    systemctl show -- -.mount | grep -Eq "Wants=\S+" || return 255
```

Feel free to close this issue if this is a false positive (for example
if this code is in an unreachable code path).

Regards,

#1136544#8
Date:
2026-05-16 04:38:26 UTC
From:
To:
Hello,

Bug #1136544 in openscap reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/debian/openscap/-/commit/497cc0f5f160c38a72ccee25f2a8e18335fe3a46

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1136544