Re: Packages with incomplete .md5sum files

[Holger Levsen <holger@layer-acht.org>]

Hi Andreas,

On Donnerstag, 10. Januar 2013, Andreas Beckmann wrote:
> Hi,
> 
> the following packages from wheezy ship files that are excluded from
> the .md5sums file:
> 
>   gridsite: FILE WITHOUT MD5SUM /var/lib/gridsite/.gacl
>   gridsite: FILE WITHOUT MD5SUM /var/lib/gridsite/gridsitefoot.txt
>   gridsite: FILE WITHOUT MD5SUM /var/lib/gridsite/gridsitehead.txt
>   libreoffice-common: FILE WITHOUT MD5SUM
> /var/lib/libreoffice/share/config/javasettingsunopkginstall.xml
> nfs-common: FILE WITHOUT MD5SUM /var/lib/nfs/state
>   nfs-kernel-server: FILE WITHOUT MD5SUM /var/lib/nfs/etab
>   nfs-kernel-server: FILE WITHOUT MD5SUM /var/lib/nfs/rmtab
>   nfs-kernel-server: FILE WITHOUT MD5SUM /var/lib/nfs/xtab
>   rkhunter: FILE WITHOUT MD5SUM /var/lib/rkhunter/db/backdoorports.dat
>   rkhunter: FILE WITHOUT MD5SUM /var/lib/rkhunter/db/i18n/cn
>   rkhunter: FILE WITHOUT MD5SUM /var/lib/rkhunter/db/i18n/de
>   rkhunter: FILE WITHOUT MD5SUM /var/lib/rkhunter/db/i18n/en
>   rkhunter: FILE WITHOUT MD5SUM /var/lib/rkhunter/db/i18n/zh
>   rkhunter: FILE WITHOUT MD5SUM /var/lib/rkhunter/db/i18n/zh.utf8
>   rkhunter: FILE WITHOUT MD5SUM /var/lib/rkhunter/db/mirrors.dat
>   rkhunter: FILE WITHOUT MD5SUM /var/lib/rkhunter/db/programs_bad.dat
>   rkhunter: FILE WITHOUT MD5SUM /var/lib/rkhunter/db/suspscan.dat

those I'd file with severity "important" - sure it's a policy violation, 
surely it's bad, but I wouldnt want to delay the release for these. (And I 
also suggest to fix those for wheezy, but thats a slightly different topic ;)

>   r-base-core-dbg: FILE WITHOUT MD5SUM /usr/lib/debug/usr/bin/Rscript
>   r-base-core-dbg: FILE WITHOUT MD5SUM /usr/lib/debug/usr/lib/R/bin/Rscript
>   r-base-core: FILE WITHOUT MD5SUM /usr/bin/R
>   r-base-core: FILE WITHOUT MD5SUM /usr/bin/Rscript
>   r-base-core: FILE WITHOUT MD5SUM /usr/lib/R/bin/Rscript
>   r-base-core: FILE WITHOUT MD5SUM /usr/lib/R/etc/Renviron.ucf
>   r-base-core: FILE WITHOUT MD5SUM /usr/share/R/doc/html/packages.html

this I'd probably file as serious, not having checksums for files in /usr 
seems worse. But then, the same reasoning as for the above bugs applies, so 
maybe important is better after all.

> For sid there are additionally:
> 
>   pcp: FILE WITHOUT MD5SUM /var/lib/pcp/config/pmie/config.default
>   pcp: FILE WITHOUT MD5SUM /var/lib/pcp/config/pmlogger/config.default
>   pcp: FILE WITHOUT MD5SUM /var/lib/pcp/config/pmlogger/crontab

important as well.

Thanks for your work on this!


cheers,
	Holger