evolix/evocheck
evolix/evocheck
21
2
Fork 2
Code Issues 48 Pull requests 5 Releases 37 Wiki Activity

Check Debian Security repository from apt-cache policy output

Browse source 
Instead of parsing files,we can ask apt-cache to list the enabled repository
and look for one labeled "Debian-Security" provided by Debian.
This commit is contained in:
Jérémy Lecour 2022-11-11 10:18:12 +01:00 committed by Jérémy Lecour
parent 55b08445a7
commit 58a97812c6
2 changed files with 5 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
linux/CHANGELOG
View file

@ -9,6 +9,8 @@ and this project **does not adhere to [Semantic Versioning](http://semver.org/sp
### Changed ### Changed
* IS_DEBIANSECURITY: check Debian Security repository from apt-cache policy output
### Deprecated ### Deprecated
### Removed ### Removed

17
linux/evocheck.sh
View file

@ -226,20 +226,9 @@ check_syslogconf() {
|| failed "IS_SYSLOGCONF" "syslog evolix config file missing" || failed "IS_SYSLOGCONF" "syslog evolix config file missing"
} }
check_debiansecurity() { check_debiansecurity() {
if is_debian_bullseye; then # Look for enabled "Debian-Security" sources from the "Debian" origin
# https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.html#security-archive apt-cache policy | grep "\bl=Debian-Security\b" | grep "\bo=Debian\b" | grep --quiet "\bc=main\b"
# https://www.debian.org/security/ test $? -eq 0 || failed "IS_DEBIANSECURITY" "missing Debian-Security repository"
pattern="^deb ?(\[.*\])? ?http://security\.debian\.org/debian-security/? bullseye-security main"
elif is_debian_buster; then
pattern="^deb ?(\[.*\])? ?http://security\.debian\.org/debian-security/? buster/updates main"
elif is_debian_stretch; then
pattern="^deb ?(\[.*\])? ?http://security\.debian\.org/debian-security/? stretch/updates main"
else
pattern="^deb.*security"
fi
source_file="/etc/apt/sources.list"
grep -qE "${pattern}" "${source_file}" || failed "IS_DEBIANSECURITY" "missing debian security repository"
} }
check_aptitudeonly() { check_aptitudeonly() {
if is_debian_squeeze || is_debian_wheezy; then if is_debian_squeeze || is_debian_wheezy; then