Bug#405454: [new check] init script in level S must only use commands from /sbin:/bin

[Russ Allbery <rra@debian.org>]

Raphael Geissert <geissert@debian.org> writes:

> Attached patch implements the first part of the test, by only looking
> for mentions of /var or /usr in the init script. I'll later finish the
> second part of the check, which relies on the list of /bin and /sbin
> binaries in the archive.

I looked at this today, but I'm nervous about false positives since the
init script checks currently don't have any of the logic that the scripts
check has to avoid heredocs, conditionals, and so forth.  I'm afraid we'll
trigger on printed output for the user.

I'm going to go ahead and apply this, but mark the new tags as
experimental so that we can run it for a while and see what the results
look like and if there are a lot of false positives.

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>