From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6878513829999804416 X-Received: by 2002:adf:f212:: with SMTP id p18mr14070704wro.386.1601911285629; Mon, 05 Oct 2020 08:21:25 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a1c:9e53:: with SMTP id h80ls5066519wme.1.canary-gmail; Mon, 05 Oct 2020 08:21:24 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyhdgz6/nXpO9ENGXyqEEcA6/d79/b2iMxBHp6SIvUiyno8bf10e3yDxwjacNFr2U1iYlOv X-Received: by 2002:a1c:f70b:: with SMTP id v11mr121396wmh.21.1601911284697; Mon, 05 Oct 2020 08:21:24 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1601911284; cv=none; d=google.com; s=arc-20160816; b=jul/xZWMWJDEM9PC6n8Q9o4lOQF7gKAAfcKNsFRwBg3fPNtMkNmPA2VbtpG06nnMg8 ++tNO5FNnBqnwjPtGFlBeWFnHY3rm1yKZn18A3Ai/q0ckYn7ZuxX9NJkmvL+DjTw5Sv8 yU81kPRD6pSVurSi63JdYXPswWLyFKXkkcbgJEbq3PRm881EfEefRaiV9HKqyr92wx6P oBsEpsymd5Elf/oVIkSOqh77Qbeg4oHkoT0KwYFEFwXaKHfZHleS42gdXSgNm9s+y3bk mXLJJFtDFgsXpDm+fNAe/bf4Uw5Uz39RqQXZln86IJkjCJ1mY5nhfBwY47xRvFZF121s gltQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=user-agent:in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:to:from:date; bh=ZleWioiFClJMte5eSlPIoodGc0ZNEIFRrbpUKpEeAjk=; b=QJ95pfrLCe/UiNWT41ML6+8ioQrBaSySaeN6m4qNbYa6oigaECLEazSGVps5ayj8Ax xjDW/IxcqOPlxcSYUp4HqxitF4K4E7H9lyS5d6sM2pCDDA5rwa2dabrmu9B/ZMCklQnK tdNZycS/J0FT9Bj5gO0Rn0vToQOWC+CYvDXVVDX2w14ZZJoRX/1m8YGPs6DPobjl7UBI T0ui5tIQFi6lpVUIg5HflMxrqwILuL5Y7vYFHbTWpJ9rYKa9hhjasKth56zYredMgg5k QrVfVdhWoDzLQzrIvvNBX+DI82FLEGrvq9SFqAPJCEAWAQ1SodOIQXmZYKtgn/hon/r6 uomQ== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net Return-Path: Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id z11si4790wrp.4.2020.10.05.08.21.24 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Mon, 05 Oct 2020 08:21:24 -0700 (PDT) Received-SPF: neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) client-ip=85.214.156.166; Authentication-Results: gmr-mx.google.com; spf=neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net Received: from yssyq.m.ilbers.de (host-80-81-17-52.static.customer.m-online.net [80.81.17.52]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8) with ESMTPSA id 095FLLIn020440 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 5 Oct 2020 17:21:24 +0200 Date: Mon, 5 Oct 2020 17:21:21 +0200 From: Baurzhan Ismagulov To: isar-users@googlegroups.com Subject: Re: [debsecan] meta/classes: export dpkg status file for debsecan Message-ID: <20201005152121.GC5019@yssyq.m.ilbers.de> Mail-Followup-To: isar-users@googlegroups.com References: <20201001050635.2880259-1-daniel.sangorrin@toshiba.co.jp> <20201001050635.2880259-2-daniel.sangorrin@toshiba.co.jp> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20201001050635.2880259-2-daniel.sangorrin@toshiba.co.jp> User-Agent: Mutt/1.10.1 (2018-07-13) X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: Qucoe2EXjc28 Hello Daniel, On Thu, Oct 01, 2020 at 02:06:35PM +0900, Daniel Sangorrin wrote: > Although the currently exported manifest has enough > information for scanning vulnerabilities, the tool > debsecan depends on the /var/lib/dpkg/status file > format. This patch adds a feature to export such file. > > All rootfs'es export the file by default and with > the same file name syntax as the manifests, except > for the file extension which is ".dpkg_status" > instead of ".manifest". > > Remove the feature with: > ROOTFS_FEATURES_remove = "export-dpkg-status" Looks good to me, either. Please let me apply a couple of series from the list, then we'll have to rebase this. With kind regards, Baurzhan.