I had some issues with the ssh_integrity_check_linux script, it ignored
files with spaces in the file name.
Can I suggest that the line:
> send "echo \"INFO: Starting.\"; for i in `find $args 2>/dev/null`;do tail
> \$i >/dev/null 2>&1 && md5=`md5sum \$i | cut -d \" \" -f 1` &&
> sha1=`sha1sum \$i | cut -d \" \" -f 1` && echo FWD: `stat --printf
> \"%s:%a:%u:%g\" \$i`:\$md5:\$sha1 \$i; done; exit\r"
>
be replaced with:
> send "echo \"INFO: Starting.\"; find $args 2>/dev/null | while read i;do
> tail \"\$\{i\}\" >/dev/null 2>&1 && md5=`md5sum \"\$\{i\}\" | cut -d \" \"
> -f 1` && sha1=`sha1sum \"\$\{i\}\" | cut -d \" \" -f 1` && echo FWD: `stat
> --printf \"%s:%a:%u:%g\" \"\$\{i\}\"`:\$md5:\$sha1 \"\$\{i\}\"; done;
> exit\r"
>
for a future release? I've tested this with the same data (20k + records),
and it reproduces the same results for each of the files without white
space, and includes the additional files with spaces. (I'd imagine the
ssh_integrity_check_bsd has a similar issue, but i've not investigated)
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
