Bug#926060: lintian: portable-executable-missing-security-features false positives
On April 1, 2019 10:30:58 AM UTC, Chris Lamb <lamby@debian.org> wrote:
>Hi Scott,
>
>> > > I'm reasonably confident that clamav testfiles don't need
>hardening
>> > > features, so [1] seems pretty pointless.
>> >
>> > I don't disagree at all here but I'm wondering how Lintian would be
>> > able to detect that these are test files? Perhaps I'm missing
>> > something. :)
>>
>> I don't know. I didn't look into how the test was implemented.
>
>I guess my question was less about how the Lintian test is implemented
>but rather how Lintian might potentially be able to determine
>these .exe files are for internal testing purposes of your package.
>
>> [if] we should override the test for this package as a result,
>> that's fine.
>
>… I strongly suspect this is the case, yeah. If you agree, please
>go ahead and -done this issue. Thanks either way, naturally. :)
These are all EICAR test files [1]. Generically these are all test files (I haven't checked, other packages may ship these to). It would be at least slightly generic and not unreasonable to exclude any files with the EICAR test string from the test.
Scott K
[1] https://en.m.wikipedia.org/wiki/EICAR_test_file
Reply to: