On Wed, Jan 24, 2018 at 12:23:13AM +0100, Andreas Henriksson wrote:
> On Sun, Jan 14, 2018 at 08:08:14PM +0100, Helmut Grohne wrote:
> > Package: nomad
> [...]
> > /usr/bin/nomad contains debugfs. According to file it is a ELF
> > 64-bit LSB executable, x86-64, version 1 (SYSV)
> [...]
> 
> There doesn't seem to be any match for debugfs in the nomad source, so
> I assume this comes from some golang library that's statically linked
> into the binary (possibly golang-github-docker-docker-dev).

I looked into this a bit further. The upstream repository --which has
everything vendored-- was helpful for grepping here.

I believe the text match comes from golang-github-shirou-gopsutil.
Looking at the source for that package, in disk/disk_linux.go one can
find a list of filesystems, including debugfs but also others. Some of
the more easily greppable ones (cramfs, ecryptfs, gpfs) can be also
found in /usr/bin/nomad, so it looks like this is the right match.

It doesn't look like this code uses any binary from e2fsprogs, and
therefore I don't think a dependency is needed, i.e. I think this is a
false positive.

Leaving this open for now in case the maintainer disagrees. Happy to
look into things further if that's the case.

Regards,
Faidon

Reply via email to