Package: lynis
Version: 2.6.2-1
Severity: normal

Dear Francisco,

   * What led up to the situation?

Calling lynis as user (where /usr/games is in $PATH by default on
Debian).

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

Calling "lynis audit system" as unprivileged user (after fixing the
permissions bug reported in https://bugs.debian.org/939325).

   * What was the outcome of this action?

A window with the game Pacman popped up when lynis started what it
believed to be ArchLinux's package manager "pacman":

>From /tmp/lynis.log:

2019-09-03 13:03:13 
===---------------------------------------------------------------===
2019-09-03 13:03:13 Performing test ID PKGS-7310 (Checking package list with 
pacman)
2019-09-03 13:03:13 Result: Found pacman binary (/usr/games/pacman)
                                                 ^^^^^^^^^^^
2019-09-03 13:03:13 Test: Querying 'pacman -Q' to get package list
2019-09-03 13:03:13 Output:
2019-09-03 13:03:13 --------
2019-09-03 13:13:58 Result: pacman binary available, but package list seems to 
be empty
2019-09-03 13:13:58 Info: looks like the pacman binary is installed, but not 
used for package installation

   * What outcome did you expect instead?

Not looking for package managers in /usr/games/ and hence skipping of
that test, because pacman, the package manager is not installed (and not
packaged for Debian either).

This probably can be considered a debian-specific issue as well as an
upstream issue. Hence not tagging as "upstream" for now.

P.S.: Other Debian packages had the same issue in the past when looking
for ArchLinux's package manager, too. The discussion in
https://bugs.debian.org/752114 contains some discussion and arguments on
how this kind of issues can be fixed.

-- System Information:
Debian Release: 10.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, 'stable'), 
(400, 'proposed-updates-debug'), (400, 'proposed-updates')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-6-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages lynis depends on:
ii  e2fsprogs  1.44.5-1+deb10u1

Versions of packages lynis recommends:
ii  menu  2.1.47+b1

Versions of packages lynis suggests:
pn  aide          <none>
ii  apt-listbugs  0.1.28
ii  debsecan      0.4.19
ii  debsums       2.2.3
ii  dnsutils      1:9.11.5.P4+dfsg-5.1
ii  fail2ban      0.10.2-2.1
pn  samhain       <none>
pn  tripwire      <none>

-- no debconf information

Reply via email to