Package: sxid
Version: 4.0.5
Severity: normal

The sxid program e-mails a list of files every day that it claims have
changed md5sums.  The list appears to include every suid or sgid file on
my system, suggesting that the md5sum comparison performed by sxid
simply does not work.  I chose a sample from the list (/bin/su) and
manually collected the output of md5sum and stat on it both before and
after an sxid run.  The output of both was identical, other than the
last-accessed date from stat.

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.20
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages sxid depends on:
ii  libc6                       2.3.6.ds1-11 GNU C Library: Shared libraries
ii  postfix [mail-transport-age 2.3.7-3      A high-performance mail transport 

sxid recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to