On Sat, 28 Nov 2015 10:47:54 +0800 Paul Wise wrote: > There were a couple of bugs, now I am using this:
I've now integrated it into apt, fixed dbgsym and
moved it out of /etc into /var.
/etc/apt/apt.conf.d/99debsecan:
APT::Update::Pre-Invoke { "/usr/sbin/debsecan-apt-priority"; };
/usr/sbin/debsecan-apt-priority:
#!/bin/sh
set -e
# https://bugs.debian.org/725934
rm -f /var/lib/debsecan/apt_preferences.disabled
> /var/lib/debsecan/apt_preferences.disabled
for pkg in $(debsecan | grep -E '\(fixed(\)|, )' | cut -d\ -f2 | sort -u) ; do
case "$pkg" in
*-dbgsym)
cat <<EOF >> /var/lib/debsecan/apt_preferences.disabled
Package: $pkg
Pin: release a=unstable-debug
Pin-Priority: 900
EOF
;;
*)
cat <<EOF >> /var/lib/debsecan/apt_preferences.disabled
Package: $pkg
Pin: release a=unstable
Pin-Priority: 900
EOF
;;
esac
done
chmod 644 /var/lib/debsecan/apt_preferences.disabled
mv --force /var/lib/debsecan/apt_preferences.disabled
/var/lib/debsecan/apt_preferences
--
bye,
pabs
https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part
