Package: debsums Version: 2.0.52 Severity: serious User: [email protected] Usertags: piuparts
Hi, I reported #688739 about something modifying /etc/grub.d/05_debian_theme during a squeeze->wheezy upgrade. Further analysis shows that this is a spurious error. The files in /etc/grub.d are identical both after a squeeze->wheezy upgrade of grub-pc and also after a fresh wheezy installation of grub-pc. The only difference I could find is here: squeeze2wheezy# debsums -a grub-pc /usr/lib/grub-legacy/update-grub OK /usr/sbin/upgrade-from-grub-legacy OK /usr/share/bug/grub-pc/presubj OK /usr/share/bug/grub-pc/script OK /usr/share/man/man8/grub-install.8.gz OK /usr/share/man/man8/grub-mknetdir.8.gz OK /usr/share/man/man8/grub-setup.8.gz OK /etc/kernel/postinst.d/zz-update-grub OK /etc/kernel/postrm.d/zz-update-grub OK /etc/grub.d/05_debian_theme FAILED squeeze2wheezy# dpkg -S /etc/grub.d/05_debian_theme grub-common: /etc/grub.d/05_debian_theme squeeze2wheezy# grep etc/grub.d/05_debian_theme /var/lib/dpkg/info/* /var/lib/dpkg/info/grub-common.conffiles:/etc/grub.d/05_debian_theme /var/lib/dpkg/info/grub-common.list:/etc/grub.d/05_debian_theme wheezy# debsums -a grub-pc /usr/lib/grub-legacy/update-grub OK /usr/sbin/upgrade-from-grub-legacy OK /usr/share/bug/grub-pc/presubj OK /usr/share/bug/grub-pc/script OK /usr/share/man/man8/grub-install.8.gz OK /usr/share/man/man8/grub-mknetdir.8.gz OK /usr/share/man/man8/grub-setup.8.gz OK /etc/kernel/postinst.d/zz-update-grub OK /etc/kernel/postrm.d/zz-update-grub OK wheezy# dpkg -S /etc/grub.d/05_debian_theme grub-common: /etc/grub.d/05_debian_theme wheezy# grep etc/grub.d/05_debian_theme /var/lib/dpkg/info/* /var/lib/dpkg/info/grub-common.conffiles:/etc/grub.d/05_debian_theme /var/lib/dpkg/info/grub-common.list:/etc/grub.d/05_debian_theme How can debsums report a md5sum mismatch for a file owned by a completely different package? Setting the severity to serious - if there are false positives - are there false negatives too? Andreas -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
