Project

General

Profile

Bug #511

DSA-3793-1 : update passwd and login packages

Added by Pierre-Louis Bonicoli about 2 years ago.

Status:
Resolved
Priority:
Normal
Category:
-
Start date:
2017-02-25
Due date:
% Done:

100%

Patch Available:
Confirmed:
Yes
Branch:
Entity:
DuckCorp
Security:
Help Needed:

Description

The following command was used:

ansible 'all:!Elwing' -m apt -a "name=login,passwd,uidmap state=latest update_cache=yes only_upgrade=yes" 

rkhunter script fails on Toushirou:

Toushirou | FAILED! => {
    "cache_update_time": 1488027681, 
    "cache_updated": true, 
    "changed": false, 
    "failed": true, 
    "msg": "'/usr/bin/apt-get -y -o \"Dpkg::Options::=--force-confdef\" -o \"Dpkg::Options::=--force-confold\" --only-upgrade    install 'passwd'' failed: E: Problem executing scripts DPkg::Post-Invoke 'if [ -x /usr/bin/rkhunter ] && grep -qiE '^APT_AUTOGEN=.?(true|yes)' /etc/default/rkhunter; then /usr/share/rkhunter/scripts/rkhupd.sh; fi'\nE: Sub-process returned an error code\n", 
    "stderr": "E: Problem executing scripts DPkg::Post-Invoke 'if [ -x /usr/bin/rkhunter ] && grep -qiE '^APT_AUTOGEN=.?(true|yes)' /etc/default/rkhunter; then /usr/share/rkhunter/scripts/rkhupd.sh; fi'\nE: Sub-process returned an error code\n", 
    "stderr_lines": [
        "E: Problem executing scripts DPkg::Post-Invoke 'if [ -x /usr/bin/rkhunter ] && grep -qiE '^APT_AUTOGEN=.?(true|yes)' /etc/default/rkhunter; then /usr/share/rkhunter/scripts/rkhupd.sh; fi'", 
        "E: Sub-process returned an error code" 
    ], 
    "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following packages will be upgraded:\n  passwd\n1 upgraded, 0 newly installed, 0 to remove and 27 not upgraded.\nNeed to get 970 kB of archives.\nAfter this operation, 325 kB disk space will be freed.\nGet:1 http://security.debian.org/ jessie/updates/main passwd amd64 1:4.2-3+deb8u3 [970 kB]\nFetched 970 kB in 0s (2593 kB/s)\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 269474 files and directories currently installed.)\r\nPreparing to unpack .../passwd_1%3a4.2-3+deb8u3_amd64.deb ...\r\nUnpacking passwd (1:4.2-3+deb8u3) over (1:4.2-3+deb8u1) ...\r\nProcessing triggers for man-db (2.7.0.2-5) ...\r\nSetting up passwd (1:4.2-3+deb8u3) ...\r\nWaiting for lock file..10..20..30..40..50..60..70..80..90..100..110..120..130..140..150..160..170..180..190..200..210..220..230..240..250..260..270..280..290..300\nUnable to get the lock file: rkhunter has not run!\n", 
    "stdout_lines": [
        "Reading package lists...", 
        "Building dependency tree...", 
        "Reading state information...", 
        "The following packages will be upgraded:", 
        "  passwd", 
        "1 upgraded, 0 newly installed, 0 to remove and 27 not upgraded.", 
        "Need to get 970 kB of archives.", 
        "After this operation, 325 kB disk space will be freed.", 
        "Get:1 http://security.debian.org/ jessie/updates/main passwd amd64 1:4.2-3+deb8u3 [970 kB]", 
        "Fetched 970 kB in 0s (2593 kB/s)", 
        "(Reading database ... ", 
        "(Reading database ... 5%", 
        "(Reading database ... 10%", 
        "(Reading database ... 15%", 
        "(Reading database ... 20%", 
        "(Reading database ... 25%", 
        "(Reading database ... 30%", 
        "(Reading database ... 35%", 
        "(Reading database ... 40%", 
        "(Reading database ... 45%", 
        "(Reading database ... 50%", 
        "(Reading database ... 55%", 
        "(Reading database ... 60%", 
        "(Reading database ... 65%", 
        "(Reading database ... 70%", 
        "(Reading database ... 75%", 
        "(Reading database ... 80%", 
        "(Reading database ... 85%", 
        "(Reading database ... 90%", 
        "(Reading database ... 95%", 
        "(Reading database ... 100%", 
        "(Reading database ... 269474 files and directories currently installed.)", 
        "Preparing to unpack .../passwd_1%3a4.2-3+deb8u3_amd64.deb ...", 
        "Unpacking passwd (1:4.2-3+deb8u3) over (1:4.2-3+deb8u1) ...", 
        "Processing triggers for man-db (2.7.0.2-5) ...", 
        "Setting up passwd (1:4.2-3+deb8u3) ...", 
        "Waiting for lock file..10..20..30..40..50..60..70..80..90..100..110..120..130..140..150..160..170..180..190..200..210..220..230..240..250..260..270..280..290..300", 
        "Unable to get the lock file: rkhunter has not run!" 
    ]

After upgrade, the following checks were performed:

  • ansible 'all:!Elwing' -i hosts -m shell -a 'test "$(dpkg-query -W -f\${Version} passwd)" = "1:4.2-3+deb8u3"'
    
  • ansible 'all:!Elwing' -i hosts -m shell -a 'test "$(dpkg-query -W -f\${Version} login)" = "1:4.2-3+deb8u3"'
    

Also available in: Atom PDF