Path: csiph.com!news.mixmin.net!news.unit0.net!newsfeed.CARNet.hr!news.spin.it!bofh.it!news.nic.it!robomod
From: Scott Kitterman <debian@kitterman.com>
Newsgroups: linux.debian.bugs.dist
Subject: Bug#926060: lintian: portable-executable-missing-security-features false positives
Date: Mon, 01 Apr 2019 12:30:04 +0200
Message-ID: <xI2mw-O2-3@gated-at.bofh.it>
References: <xHBcB-11y-1@gated-at.bofh.it> <xI0Xn-8hA-3@gated-at.bofh.it> <xHBcB-11y-1@gated-at.bofh.it> <xI0Xn-8hA-3@gated-at.bofh.it>
Old-Return-Path: <debbugs@buxtehude.debian.org>
Reply-To: Scott Kitterman <debian@kitterman.com>, 926060@bugs.debian.org
Resent-To: debian-bugs-dist@lists.debian.org
Resent-Cc: Debian Lintian Maintainers <lintian-maint@debian.org>
User-Agent: KMail/4.13.3 (Linux/3.13.0-164-generic; KDE/4.13.3; x86_64; ; )
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"
Approved: robomod@news.nic.it
Lines: 19
Organization: linux.* mail to news gateway
Sender: robomod@news.nic.it
Xref: csiph.com linux.debian.bugs.dist:952519

On Monday, April 01, 2019 04:45:44 AM Chris Lamb wrote:
> tags 926060 + moreinfo
> thanks
> 
> Hi Scott,
> 
> > I'm reasonably confident that clamav testfiles don't need hardening
> > features, so [1] seems pretty pointless.
> 
> I don't disagree at all here but I'm wondering how Lintian would be
> able to detect that these are test files? Perhaps I'm missing
> something. :)

I don't know.  I didn't look into how the test was implemented.  I thought it 
worthwhile to raise the point.  If the answer is that it requires special 
casing that you don't do in Linitan and we should override the test for this 
package as a result, that's fine.

Scott K