Package: checksecurity Version: 2.0.14 Severity: normal The trailing | in the "type (xxx...|)" branch of CS_NFSAFS (see patch) apparently matches any type, so that find gets no paths to start with. Removing it, I am left with / and /dev rather than the empty list.
-- System Information: Debian Release: 7.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.2.41ale20 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages checksecurity depends on: ii cron 3.0pl1-124 ii debconf [debconf-2.0] 1.5.49 ii perl 5.14.2-21 ii util-linux 2.20.1-5.3 Versions of packages checksecurity recommends: pn logcheck <none> pn tiger <none> ii tripwire 2.4.2.2-2 Versions of packages checksecurity suggests: pn apt-watch | cron-apt <none> ii lockfile-progs 0.1.17 -- Configuration Files: /etc/checksecurity/check-setuid.conf changed [not included] -- debconf-show failed *** check-setuid.conf.patch --- check-setuid.conf.default 2009-05-26 01:39:51.000000000 +0200 +++ check-setuid.conf 2013-09-26 17:42:17.000000000 +0200 @@ -48,7 +48,7 @@ # Use temp variables to build up CHECKSECURITY_FILTER, to make it # a little more readable. # -CS_NFSAFS='(type (nfs|afs|coda|lustre|mfs|nnpfs|)|^(arla .* type xfs))' +CS_NFSAFS='(type (nfs|afs|coda|lustre|mfs|nnpfs)|^(arla .* type xfs))' # Uncomment the next line to get the old behaviour. #CS_NFSAFS='(nfs|afs) \(.*(nosuid|noexec).*nodev.*\)' # -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
