i agree with Sam Morris that this bug should be treated as a security
concern.

checkrestart appears to be used primarily as a security audit tool: to
find outdated versions of libraries still in use, particularly after
security upgrades.  It fails to report the things it claims to be able
to detect, without acknowledging the failure.  People are probably
relying on it for security without knowing that it is failing them.

Fonts in a web browser are unlike checkrestart, because they are
largely used for other, non-security purposes.

If checkrestart does actually work with certain kernels or versions of
lsof, it should check for those versions and at least issue a warning
if it is unsure about its capabilities.

I may be biased because i only learned about this tool from a thread
in a web discussion [0] about keeping a machine properly patched.
However, i imagine my experience/perception of checkrestart is not
atypical.

Thanks for maintaining debian-goodies, btw!  i just found out about
it, and it looks like it's got some neat tools to experiment with.

        --dkg

[0] http://www.debian-administration.org/users/dkg/weblog/8


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to