#970704 tiger: "Don't have required command DIFF" on Linux kernel 5.x

Package:
tiger
Source:
tiger
Description:
security auditing and intrusion detection tools for Linux
Submitter:
Vincent Danjean
Date:
2021-01-16 23:24:02 UTC
Severity:
important
Tags:
#970704#5
Date:
2020-09-22 06:07:58 UTC
From:
To:
  Hi,

  Using backported kernels in buster, I've been hit by this bug,
very similar to #785589.
  The workaround is the same (but the numbers to bump) :

  cd /usr/lib/tiger/systems/Linux/
  sudo ln -s 4 5

  And the patch is similar (create the symlink in the package)

  As the config is the same for linux 2, 3, 4 and 5, perhaps
the fix can involve to use the highest available number
less or equal the current kernel major version...
  This would avoid these missing symlink bugs.

  Regards
    Vincent
#970704#10
Date:
2021-01-16 23:21:13 UTC
From:
To:
Dear Vicent,

Thank you for your bug report

This fix was introduced in package version 1:3.2.4~rc1-2, in this package
the  symlink already exists and is created by debian/rules. Actually, there
is a "default" symlink which should make it work regardless of the Linux
kernel version in use:

$  ls -la /usr/lib/tiger/systems/Linux/
total 24
drwxr-xr-x 5 root root 4096 dic 13 22:27 .
drwxr-xr-x 4 root root 4096 ago 19  2019 ..
drwxr-xr-x 3 root root 4096 dic 13 22:27 0
drwxr-xr-x 3 root root 4096 dic 13 22:27 1
drwxr-xr-x 2 root root 4096 dic 13 22:27 2
lrwxrwxrwx 1 root root    1 ago 19  2019 3 -> 2
lrwxrwxrwx 1 root root    1 ago 19  2019 4 -> 2
lrwxrwxrwx 1 root root    1 ago 19  2019 5 -> 2
lrwxrwxrwx 1 root root    1 ago 19  2019 default -> 2

You can also fix the issue in your system by creating the default symlink
as shown above.

The tiger package can be easily backported to buster. If this might be of
use I could create a backported version of it fixing this problem.

Best regards

Javier