File seccheck-2.0_dont_run_xarg_on_empty_input.diff of Package seccheck.611

Overview Repositories Revisions Requests Users Attributes Meta

File seccheck-2.0_dont_run_xarg_on_empty_input.diff of Package seccheck.611

diff -ru seccheck-2.0.bak/security-weekly.sh seccheck-2.0/security-weekly.sh
--- seccheck-2.0.bak/security-weekly.sh	2006-07-24 14:30:14.000000000 +0200
+++ seccheck-2.0/security-weekly.sh	2006-07-24 14:47:20.000000000 +0200
@@ -89,7 +89,7 @@
 fi
 
 # suid/sgid check
-( nice -n 1 find $MNT -mount $ -perm -04000 -o -perm -02000 $ -type f | sort | xargs ls -cdl --time-style=long-iso -- > "$SEC_DATA/sbit.new" ) 2> /dev/null
+( nice -n 1 find $MNT -mount $ -perm -04000 -o -perm -02000 $ -type f | sort | xargs --no-run-if-empty ls -cdl --time-style=long-iso -- > "$SEC_DATA/sbit.new" ) 2> /dev/null
 diff -uw "$SEC_DATA/sbit" "$SEC_DATA/sbit.new" | \
 	egrep -v '^\+\+\+ |^--- |^$|^@@' | sed 's/^[+-]/& /' > "$OUT"
 if [ -s "$OUT" ] ; then
@@ -99,7 +99,7 @@
 mv "$SEC_DATA/sbit.new" "$SEC_DATA/sbit"
 
 # writeable executable check
-( nice -n 1 find $MNT -mount $ -perm -30 -o -perm -3 $ -type f | sort | xargs ls -cdl --time-style=long-iso -- > "$SEC_DATA/write-bin.new" ) 2> /dev/null
+( nice -n 1 find $MNT -mount $ -perm -30 -o -perm -3 $ -type f | sort | xargs --no-run-if-empty ls -cdl --time-style=long-iso -- > "$SEC_DATA/write-bin.new" ) 2> /dev/null
 diff -uw "$SEC_DATA/write-bin" "$SEC_DATA/write-bin.new" | \
 	egrep -v '^\+\+\+ |^--- |^$|^@@' | sed 's/^[+-]/& /' > "$OUT"
 if [ -s "$OUT" ] ; then
@@ -131,7 +131,7 @@
 # device check
 # warning: bug #51004 ls output depends on root's locale and may be less
 # then 10 tokens!
-( nice -n 1 find $MNT -mount -type c -or -type b | xargs ls -cdl --time-style=long-iso -- | \
+( nice -n 1 find $MNT -mount -type c -or -type b | xargs --no-run-if-empty ls -cdl --time-style=long-iso -- | \
 	awk '{print $1 " \t" $3 " \t" $4 " \t" $5 " \t" $6 " \t" $9}' | sort +5 \
 	> "$SEC_DATA/devices.new" ) 2> /dev/null
 diff -uw "$SEC_DATA/devices" "$SEC_DATA/devices.new" | \

Places

File seccheck-2.0_dont_run_xarg_on_empty_input.diff of Package seccheck.611

Places