You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It would appear that ALL (or, at least most) output from glsa-check is sent to STDERR. As is, lynis expects the string "This system is affected by the following GLSAs:", if the system has vulnerable packages (filtering that particular string out).
If the system does NOT have vulnerable packages, glsa-check send the following string to STDERR: "This system is not affected by any of the listed GLSAs". Since STDERR is redirected to STDOUT in th lynis check, it gives a false positive, even though the system is clean.
I have a 64-bit gentoo VM that I think has some outstanding GLSAs, I may be able to assist with this one.
The text was updated successfully, but these errors were encountered:
It would appear that ALL (or, at least most) output from
glsa-check
is sent to STDERR. As is, lynis expects the string "This system is affected by the following GLSAs:", if the system has vulnerable packages (filtering that particular string out).If the system does NOT have vulnerable packages,
glsa-check
send the following string to STDERR: "This system is not affected by any of the listed GLSAs". Since STDERR is redirected to STDOUT in th lynis check, it gives a false positive, even though the system is clean.I have a 64-bit gentoo VM that I think has some outstanding GLSAs, I may be able to assist with this one.
The text was updated successfully, but these errors were encountered: