Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1198087

Bug#1071377: chkrootkit: File name including a quote mark throws script off

Show all headers | View raw

On Sat, 18 May 2024 at 08:39, Shai Berger <shai@platonix.com> wrote:

> This morning, when chkrootkit made its daily run, I had
> in /tmp a file named: 'חברת חשמל לישראל בע"מ - חשבון דו חודשי.pdf'
> (the single quote marks on the edges are not part of the name, but
> the double quote mark in the middle is)
>
> This caused this output from the script:
>
> """
> Searching for suspect PHP files...                          /usr/bin/head: cannot open '/tmp/חברת חשמל לישראל בעמ' for reading: No such file or directory
> /usr/bin/head: cannot open 'חשבון' for reading: No such file or directory
> /usr/bin/head: cannot open 'דו' for reading: No such file or directory
> /usr/bin/head: cannot open 'חודשי.pdf 2>/dev/null | /usr/bin/grep -q ^#!.*php && echo /tmp/חברת' for reading: No such file or directory
> /usr/bin/head: cannot open 'חשמל' for reading: No such file or directory
> /usr/bin/head: cannot open 'לישראל' for reading: No such file or directory
> /usr/bin/head: cannot open 'בעמ - חשבון דו חודשי.pdf' for reading: No such file or directory
> WARNING

Thanks, yes this is probably also bug in upstream as well, but there
are debian-specific patches that make this worse. Will fix.

Patches also welcome - it's patch number 16 in debian/patches that has
the PHP check.

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#1071377: chkrootkit: File name including a quote mark throws script off Shai Berger <shai@platonix.com> - 2024-05-18 09:40 +0200
  Bug#1071377: chkrootkit: File name including a quote mark throws script off Richard Lewis <richard.lewis.debian@googlemail.com> - 2024-05-20 20:50 +0200

csiph-web