Your message dated Fri, 11 Sep 2026 04:34:07 +0000
with message-id <[email protected]>
and subject line Bug#1136583: fixed in scap-security-guide 0.1.82-1
has caused the Debian Bug report #1136583,
regarding scap-security-guide uses pidof but does not depend on procps
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1136583: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136583
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: scap-security-guide
Version: 0.1.80-1
Usertags: pidof-without-procps

Dear maintainer(s) of scap-security-guide,

it appears that scap-security-guide uses `pidof` in its testsuite, or that
at least one of its binary packages uses `pidof` at runtime.
Historically, `pidof` was provided by the Essential package
`sysvinit-tools`, making an explicit dependency unnecessary. However
`pidof` will soon be moved to `procps` and will no longer be part of
the Essential set.

Please add an explicit dependency on `procps`:

* via the `Depends:` field of all binary packages of scap-security-guide
  that use `pidof` at runtime;
* via the `Build-Depends:` field of scap-security-guide, if `pidof` is
  used in tests run at build-time;
* via the `Depends:` field of `debian/control/tests`, if `pidof` is
  used in autopkgtests.

To prevent any disruption for users of scap-security-guide, please add
this dependency now, before `pidof` is moved from `sysvinit-utils` to
`procps`. Alternatively, you could remove all uses of `pidof`.

It is believed that scap-security-guide uses `pidof` due to the following
code snippets:

```
path: 
scap-security-guide_0.1.79-1/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_remote_server/bash/shared.sh
config_file="/etc/ntp.conf"
/usr/sbin/pidof ntpd || config_file="{{{ chrony_conf_path }}}"
if ! grep -q ^server "$config_file" ; then


path: 
scap-security-guide_0.1.79-1/linux_os/guide/services/ntp/service_chronyd_or_ntpd_enabled/bash/shared.sh
# disruption = low
if {{{ bash_package_installed("chrony") }}} ; then
    if ! /usr/sbin/pidof ntpd ; then
        {{{ bash_service_command("enable", "chronyd") | indent(8) }}}
    fi


path: 
scap-security-guide_0.1.79-1/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/bash/shared.sh
config_file="/etc/ntp.conf"
/usr/sbin/pidof ntpd || config_file="{{{ chrony_conf_path }}}"
if ! [ "$(grep -c '^server' "$config_file")" -gt 1 ] ; then


path: 
scap-security-guide_0.1.79-1/linux_os/guide/services/ntp/chronyd_or_ntpd_set_maxpoll/bash/shared.sh
pof="/bin/pidof"
{{% else %}}
pof="/usr/sbin/pidof"
{{% endif %}}


path: 
scap-security-guide_0.1.79-1/linux_os/guide/services/ntp/chronyd_or_ntpd_set_maxpoll/bash/shared.sh
{{% if 'sle' in product or 'slmicro' in product or 'ubuntu' in product %}}
pof="/bin/pidof"
{{% else %}}
pof="/usr/sbin/pidof"
```

Feel free to close this issue if this is a false positive (for example
if this code is in an unreachable code path).

Regards,

-- 
Gioele Barabucci

--- End Message ---
--- Begin Message ---
Source: scap-security-guide
Source-Version: 0.1.82-1
Done: Håvard F. Aasen <[email protected]>

We believe that the bug you reported is fixed in the latest version of
scap-security-guide, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Håvard F. Aasen <[email protected]> (supplier of updated 
scap-security-guide package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 07 Sep 2026 21:17:46 +0200
Source: scap-security-guide
Architecture: source
Version: 0.1.82-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <[email protected]>
Changed-By: Håvard F. Aasen <[email protected]>
Closes: 1136583
Changes:
 scap-security-guide (0.1.82-1) unstable; urgency=medium
 .
   * New upstream release.
     - Update installed files.
     - Update package description to match installed products.
   * Add procps as BD. (Closes: #1136583)
   * Update Standards-Version to 4.7.4, no changes needed.
Checksums-Sha1:
 0fbcedc80bd2e515ebd92e49c4104d9022945096 1883 scap-security-guide_0.1.82-1.dsc
 c223d825b6739c02d881e32400854d7e8107c5c5 11055996 
scap-security-guide_0.1.82.orig.tar.gz
 99d5aed8ddc109db64c9f0f56b8b854aea4b03d7 7492 
scap-security-guide_0.1.82-1.debian.tar.xz
 ff04e1b407ab8ee915a50fa9ff6ccdc4c3e27845 8433 
scap-security-guide_0.1.82-1_amd64.buildinfo
Checksums-Sha256:
 c3f3785094f5bb118a75b3698683aa21f1a2757f6508b84b7228edd367b59c8a 1883 
scap-security-guide_0.1.82-1.dsc
 baba693022dc216a17b62822c85c5587e65c5848f404c918ebea79c8fcca2cb5 11055996 
scap-security-guide_0.1.82.orig.tar.gz
 c0ed13dd4b828a2a9356c66d046ee187f0ad1e5c8af70839243236510c0d98f7 7492 
scap-security-guide_0.1.82-1.debian.tar.xz
 bf553bfc9176e0665ec545740c3a7aed61129b5b7f45bae573d9501e82badee8 8433 
scap-security-guide_0.1.82-1_amd64.buildinfo
Files:
 c61f9a5574c6e8f8a0eae8ee913803b4 1883 admin optional 
scap-security-guide_0.1.82-1.dsc
 08692d504dbb3b00f27b2c52915818ad 11055996 admin optional 
scap-security-guide_0.1.82.orig.tar.gz
 75f1aa9ac2328b6a39b9de1b04e4e215 7492 admin optional 
scap-security-guide_0.1.82-1.debian.tar.xz
 3ec9b3c2901ac703435ab300408e40e0 8433 admin optional 
scap-security-guide_0.1.82-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iI0EARYKADUWIQSD/42dLkLq3fzhpN2I4w6v/UfCtwUCaqN/2hccaGF2YXJkLmYu
YWFzZW5AcGZmdC5ubwAKCRCI4w6v/UfCtwVCAP9x7RG3CM+W6asOiS9JZuUPr29h
tdj6UcjapeBVjLKFGgD+Jhg9YNniVdLdWnSa0oArC/3itjyALGpHratiGGbvNQE=
=90Kr
-----END PGP SIGNATURE-----

Attachment: pgpu2GbeQ9Zj1.pgp
Description: PGP signature


--- End Message ---

Reply via email to