Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

lynis: 2.6.9 -> 2.7.0 #50045

Merged
merged 2 commits into from
Nov 10, 2018
Merged

lynis: 2.6.9 -> 2.7.0 #50045

merged 2 commits into from
Nov 10, 2018
+5 −8

Conversation

r-ryantm
Copy link
Contributor

@r-ryantm r-ryantm commented Nov 9, 2018

Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/lynis/versions.

meta.description for lynis is: '"Security auditing tool for Linux, macOS, and UNIX-based systems"'.

Release on GitHub

Compare changes on GitHub

Checks done (click to expand)
  • built on NixOS
  • /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0/bin/lynis passed the binary check.
  • /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0/bin/.lynis-wrapped passed the binary check.
  • 2 of 2 passed binary check by having a zero exit code.
  • 2 of 2 passed binary check by having the new version present in output.
  • found 2.7.0 with grep in /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0
  • directory tree listing: https://gist.github.com/aec2352c32fde98d88f996d252c2ab5a
  • du listing: https://gist.github.com/e9bb6338d691ac845c6e988ef01365e4
Outpath report (click to expand)

Outpath difference report
4 total rebuild paths

1 package rebuilds

1 x86_64-linux rebuilds
1 i686-linux rebuilds
1 x86_64-darwin rebuilds
1 aarch64-linux rebuilds

First ten rebuilds by attrpath
lynis

Instructions to test this update (click to expand)

Either download from Cachix:

nix-store -r /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0 \
  --option binary-caches 'https://cache.nixos.org/ https://r-ryantm.cachix.org/' \
  --option trusted-public-keys '
  r-ryantm.cachix.org-1:gkUbLkouDAyvBdpBX0JOdIiD2/DP1ldF3Z3Y6Gqcc4c=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(r-ryantm's Cachix cache is only trusted for this store-path realization.)

Or, build yourself:

nix-build -A lynis https://github.com/r-ryantm/nixpkgs/archive/2326e36bb9ea31dfadb0703b1b359c25f97ea853.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0
ls -la /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0/bin

cc @ryneeverett for testing.

@r-ryantm
lynis: 2.6.9 -> 2.7.0

Verified

This commit was signed with the committer’s verified signature. The key has expired.
schneefux
GPG key ID: 50F2BF336737C2F0
Expired
Verified
Learn about vigilant mode
2326e36 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/lynis/versions
@GrahamcOfBorg
Copy link

Success on x86_64-darwin (full log)

Attempted: lynis

Partial log (click to expand)

no configure script, doing nothing
building
no Makefile, doing nothing
installing
post-installation fixup
strip is /nix/store/g5r4apl0za012ffs6ladinwa5w0m1l3k-cctools-binutils-darwin/bin/strip
stripping (with command strip and flags -S) in /nix/store/a5rbcqyhg8jl77vpky597pslk2h2dhxq-lynis-2.7.0/bin
patching script interpreter paths in /nix/store/a5rbcqyhg8jl77vpky597pslk2h2dhxq-lynis-2.7.0
/nix/store/a5rbcqyhg8jl77vpky597pslk2h2dhxq-lynis-2.7.0/bin/.lynis-wrapped: interpreter directive changed from "/bin/sh" to "/nix/store/n9hba031gjky8hpjgx9fnlaxhidyzxbz-bash-4.4-p23/bin/sh"
/nix/store/a5rbcqyhg8jl77vpky597pslk2h2dhxq-lynis-2.7.0

@GrahamcOfBorg
Copy link

Success on x86_64-linux (full log)

Attempted: lynis

Partial log (click to expand)

no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0
strip is /nix/store/vcc4svb8gy29g4pam2zja6llkbcwsyiq-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0/bin
patching script interpreter paths in /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0
/nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0/bin/.lynis-wrapped: interpreter directive changed from "/bin/sh" to "/nix/store/r47p5pzx52m3n34vdgqpk5rvqgm0m24m-bash-4.4-p23/bin/sh"
checking for references to /build in /nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0...
/nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0

@GrahamcOfBorg
Copy link

Success on aarch64-linux (full log)

Attempted: lynis

Partial log (click to expand)

no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/skjrrck2x0n9w9mnb1xins36m3s6xqsg-lynis-2.7.0
strip is /nix/store/p9akxn2sfy4wkhqdqa3li97pc6jaz3r1-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/skjrrck2x0n9w9mnb1xins36m3s6xqsg-lynis-2.7.0/bin
patching script interpreter paths in /nix/store/skjrrck2x0n9w9mnb1xins36m3s6xqsg-lynis-2.7.0
/nix/store/skjrrck2x0n9w9mnb1xins36m3s6xqsg-lynis-2.7.0/bin/.lynis-wrapped: interpreter directive changed from "/bin/sh" to "/nix/store/dsyc1z7ck08ga7l0b1jcxx35wj69qcii-bash-4.4-p23/bin/sh"
checking for references to /build in /nix/store/skjrrck2x0n9w9mnb1xins36m3s6xqsg-lynis-2.7.0...
/nix/store/skjrrck2x0n9w9mnb1xins36m3s6xqsg-lynis-2.7.0

c0bw3b
c0bw3b requested changes Nov 9, 2018
View reviewed changes
Copy link
Contributor

@c0bw3b c0bw3b left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does not prevent the use of the tool but:

$ ./result/bin/lynis show version
/nix/store/2692qxa68mv3gqqnfx8symzj12vps0hq-lynis-2.7.0/bin/.lynis-wrapped: line 593: [: argument expected
2.7.0

Don't merge yet I'll try and hotfix this.

@c0bw3b c0bw3b self-assigned this Nov 9, 2018
@c0bw3b
lynis: remove perl and create plugins subdir

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode
eb79c24
@GrahamcOfBorg
Copy link

Success on aarch64-linux (full log)

Attempted: lynis

Partial log (click to expand)

no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/pdy2mm3d49gkn8m59i4d5xzawl2psns2-lynis-2.7.0
strip is /nix/store/p9akxn2sfy4wkhqdqa3li97pc6jaz3r1-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/pdy2mm3d49gkn8m59i4d5xzawl2psns2-lynis-2.7.0/bin
patching script interpreter paths in /nix/store/pdy2mm3d49gkn8m59i4d5xzawl2psns2-lynis-2.7.0
/nix/store/pdy2mm3d49gkn8m59i4d5xzawl2psns2-lynis-2.7.0/bin/.lynis-wrapped: interpreter directive changed from "/bin/sh" to "/nix/store/dsyc1z7ck08ga7l0b1jcxx35wj69qcii-bash-4.4-p23/bin/sh"
checking for references to /build in /nix/store/pdy2mm3d49gkn8m59i4d5xzawl2psns2-lynis-2.7.0...
/nix/store/pdy2mm3d49gkn8m59i4d5xzawl2psns2-lynis-2.7.0

@GrahamcOfBorg
Copy link

Success on x86_64-darwin (full log)

Attempted: lynis

Partial log (click to expand)

no configure script, doing nothing
building
no Makefile, doing nothing
installing
post-installation fixup
strip is /nix/store/g5r4apl0za012ffs6ladinwa5w0m1l3k-cctools-binutils-darwin/bin/strip
stripping (with command strip and flags -S) in /nix/store/mh14kwzg3b423cfjcwl80lyxhmjnbf68-lynis-2.7.0/bin
patching script interpreter paths in /nix/store/mh14kwzg3b423cfjcwl80lyxhmjnbf68-lynis-2.7.0
/nix/store/mh14kwzg3b423cfjcwl80lyxhmjnbf68-lynis-2.7.0/bin/.lynis-wrapped: interpreter directive changed from "/bin/sh" to "/nix/store/n9hba031gjky8hpjgx9fnlaxhidyzxbz-bash-4.4-p23/bin/sh"
/nix/store/mh14kwzg3b423cfjcwl80lyxhmjnbf68-lynis-2.7.0

@GrahamcOfBorg
Copy link

Success on x86_64-linux (full log)

Attempted: lynis

Partial log (click to expand)

no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/rca93i66rc3pbp0h8kxyvfm1q4kj5ysl-lynis-2.7.0
strip is /nix/store/vcc4svb8gy29g4pam2zja6llkbcwsyiq-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/rca93i66rc3pbp0h8kxyvfm1q4kj5ysl-lynis-2.7.0/bin
patching script interpreter paths in /nix/store/rca93i66rc3pbp0h8kxyvfm1q4kj5ysl-lynis-2.7.0
/nix/store/rca93i66rc3pbp0h8kxyvfm1q4kj5ysl-lynis-2.7.0/bin/.lynis-wrapped: interpreter directive changed from "/bin/sh" to "/nix/store/r47p5pzx52m3n34vdgqpk5rvqgm0m24m-bash-4.4-p23/bin/sh"
checking for references to /build in /nix/store/rca93i66rc3pbp0h8kxyvfm1q4kj5ysl-lynis-2.7.0...
/nix/store/rca93i66rc3pbp0h8kxyvfm1q4kj5ysl-lynis-2.7.0

@c0bw3b c0bw3b merged commit b5179c6 into NixOS:master Nov 10, 2018
@r-ryantm r-ryantm deleted the auto-update/lynis branch November 17, 2018 22:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@c0bw3b c0bw3b

Assignees

@c0bw3b c0bw3b

Labels
10.rebuild-darwin: 1-10 10.rebuild-linux: 1-10
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@r-ryantm @GrahamcOfBorg @c0bw3b