Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #952525

Bug#926060: lintian: portable-executable-missing-security-features false positives

Path csiph.com!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From "Chris Lamb" <lamby@debian.org>
Newsgroups linux.debian.bugs.dist
Subject Bug#926060: lintian: portable-executable-missing-security-features false positives
Date Mon, 01 Apr 2019 12:40:01 +0200
Message-ID <xI2w9-R9-5@gated-at.bofh.it> (permalink)
References <xHBcB-11y-1@gated-at.bofh.it> <xI0Xn-8hA-3@gated-at.bofh.it> <xHBcB-11y-1@gated-at.bofh.it> <xI2mw-O2-3@gated-at.bofh.it> <xHBcB-11y-1@gated-at.bofh.it> <xI2mw-O2-3@gated-at.bofh.it>
X-Original-To "Scott Kitterman" <debian@kitterman.com>, 926060@bugs.debian.org
X-Mailbox-Line From debian-bugs-dist-request@lists.debian.org Mon Apr 1 10:33:08 2019
Old-Return-Path <debbugs@buxtehude.debian.org>
X-Spam-Flag NO
X-Spam-Score -4
Reply-To "Chris Lamb" <lamby@debian.org>, 926060@bugs.debian.org
Resent-To debian-bugs-dist@lists.debian.org
Resent-Cc Debian Lintian Maintainers <lintian-maint@debian.org>
X-Debian-Pr-Message followup 926060
X-Debian-Pr-Package lintian
X-Debian-Pr-Keywords moreinfo
X-Debian-Pr-Source lintian
X-Spam-Bayes score:0.0000 Tokens: new, 17; hammy, 144; neutral, 48; spammy, 0. spammytokens: hammytokens:0.000-+--U*lamby, 0.000-+--sk:lamby@d, 0.000-+--sk:lambyd, 0.000-+--lamby@debian.org, 0.000-+--lambydebianorg
Dkim-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm2; bh=B/MFl5+n0GPNodcxK/RWwePlb7pU7axawqWiUOizU J0=; b=bqsaVXM6j2nFvBoqbmqdj9jlkeyuGr5Ua7XuUiQzdN8THiCIJ74zHr2af IRbi9QdMojO70md5p1WaqV7j3/Kq2PGs3qz/7FId2WlGM1i449xGz3z89nmUFO5Q ZoLXsoSZgYc2P/HGsctbsgVRavZX0NzIzPTJAvkY12vVxp8pmLOqb0MDfZ5mX2/X El1mIwTdPZ9f1Tgwgl8CguT4vKB12b5yrnKPbLw5R39f/LAaCsavi9wUZaFORkPl qN3OM71+Ctiqkv2xvTxElgRhq5p6GmH3QXq8l8s5RnW5yeCmbczPI5SRG3Kv1zxz n5WQXXAc3P9zpnCxb2ohwP3SesIKA==
X-Me-Sender <xms:Y-ihXAXy-yUD3o75Wjog3-ZJDKrDh47-KoxWb_dT3zPaXkdz6RK-2g>
X-Me-Proxy-Cause gggruggvucftvghtrhhoucdtuddrgedutddrleeggddvjecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepofgfggfkjghffffhvffutgfgsehtqh ertderreejnecuhfhrohhmpedfvehhrhhishcunfgrmhgsfdcuoehlrghmsgihseguvggs ihgrnhdrohhrgheqnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlrghmsgihseguvggsih grnhdrohhrghenucevlhhushhtvghrufhiiigvpedt
X-Me-Proxy <xmx:Y-ihXG02l_dGn5jxssga5clAgcfLkFVrTa4dBCIUE9fWFMZcNIsMwQ> <xmx:Y-ihXEc5AxeG_f90wyqgGw818ILSHD7gOD5dFc6uOtVbu5bhHCR6dA> <xmx:Y-ihXIQz-j3HY6PBAcmNLQ5XSGFPx2gZQQ-y4JWFndO_h3DpwC2crA> <xmx:Y-ihXIwKGTVvpF2OwFsJ7ou_PVDEpGx5jzlTHGY1vQbKQvY5DvYvHQ>
X-Mailer MessagingEngine.com Webmail Interface
User-Agent Cyrus-JMAP/3.1.6-329-gf4aae99-fmstable-20190329v1
MIME-Version 1.0
X-Me-Personality 20851409
Content-Type text/plain;charset=utf-8
Content-Transfer-Encoding quoted-printable
X-Debian-Message from BTS
X-Mailing-List <debian-bugs-dist@lists.debian.org> archive/latest/1530416
List-ID <debian-bugs-dist.lists.debian.org>
List-URL <https://lists.debian.org/debian-bugs-dist/>
Approved robomod@news.nic.it
Lines 31
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Mon, 01 Apr 2019 06:30:58 -0400
X-Original-Message-ID <98bdd21a-183c-4abe-8372-efaf4542641b@www.fastmail.com>
X-Original-References <20190331051840.22127.71420.reportbug@kitterma-E6430> <ffdef0ef-ae26-4138-afc0-9dfe47f22e6a@www.fastmail.com> <20190331051840.22127.71420.reportbug@kitterma-E6430> <3174518.cf22pGiqGt@kitterma-e6430> <20190331051840.22127.71420.reportbug@kitterma-E6430> <3174518.cf22pGiqGt@kitterma-e6430>
Xref csiph.com linux.debian.bugs.dist:952525

Show key headers only | View raw


Hi Scott,

> > > I'm reasonably confident that clamav testfiles don't need hardening
> > > features, so [1] seems pretty pointless.
> > 
> > I don't disagree at all here but I'm wondering how Lintian would be
> > able to detect that these are test files? Perhaps I'm missing
> > something. :)
> 
> I don't know.  I didn't look into how the test was implemented.

I guess my question was less about how the Lintian test is implemented
but rather how Lintian might potentially be able to determine
these .exe files are for internal testing purposes of your package.

> [if] we should override the test for this package as a result,
> that's fine.

… I strongly suspect this is the case, yeah. If you agree, please
go ahead and -done this issue. Thanks either way, naturally. :)


Best wishes,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-

Back to linux.debian.bugs.dist | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#926060: lintian: portable-executable-missing-security-features false positives Scott Kitterman <debian@kitterman.com> - 2019-03-31 07:30 +0200
  Bug#926060: lintian: portable-executable-missing-security-features false positives "Chris Lamb" <lamby@debian.org> - 2019-04-01 11:00 +0200
    Bug#926060: lintian: portable-executable-missing-security-features false positives Scott Kitterman <debian@kitterman.com> - 2019-04-01 12:30 +0200
      Bug#926060: lintian: portable-executable-missing-security-features false positives "Chris Lamb" <lamby@debian.org> - 2019-04-01 12:40 +0200
        Bug#926060: lintian: portable-executable-missing-security-features false positives Scott Kitterman <debian@kitterman.com> - 2019-04-01 15:10 +0200
          Bug#926060: lintian: portable-executable-missing-security-features false positives "Chris Lamb" <lamby@debian.org> - 2019-04-03 18:40 +0200

csiph-web