#505906 tiger: deb_checkmd5sums does not report file changes if prelink is installed

Package:
tiger
Source:
tiger
Description:
security auditing and intrusion detection tools for Linux
Submitter:
Iriguti Yosinobu
Date:
2017-09-22 10:12:06 UTC
Severity:
normal
#505906#5
Date:
2008-11-16 18:30:03 UTC
From:
To:
If /usr/sbin/prelink is installed, the log reports only about diverted
files. tigercron complains about prelink and non-ELF files like this:

/usr/sbin/prelink.bin: "/usr/bin/perldoc.stub" is not an ELF file
/usr/sbin/prelink.bin: "/usr/bin/perldoc" is not an ELF file
/usr/sbin/prelink.bin: /usr/bin/dvips.nonja: prelinked file was modified

These are because of misuse of prelink. prelink does not take md5sum's
output nor the option -c.

I made a patch which runs prelink for each file. It also gives
prelink's message if it is unexpected one. It seems to work well. The
log now reports file changes.
#505906#10
Date:
2009-11-22 18:47:24 UTC
From:
To:
Hello,

if I don't miss something the code still has an bug.

The line "while read file err" reads the filename (actually only up to the first blank) and then reads the error. But according to the lines above the error is printed first.

Regards
Benjamin
#505906#15
Date:
2017-09-22 10:08:57 UTC
From:
To:
Dear Maintainer,

This bug is still present which is easy to confirm:

$ echo 1234 /usr/sbin/prelink | prelink -y --md5 -c
/usr/sbin/prelink.bin: option requires an argument -- 'c'
Try `prelink.bin --help' or `prelink.bin --usage' for more information.

Furthermore the original issue that triggered the use of prelink to
compute MD5 checksums (Debian bug #445531) no longer seems to exist. So
I reported this issue on Savannah along with a simple patch removing the
use of prelink.

https://savannah.nongnu.org/bugs/index.php?52087