Package: checksecurity Version: 2.0.11 Severity: wishlist Tags: patch The lustre file system should be mentioned in check-setuid's CS_NFSAFS variable default in /etc/checksecurity/check-setuid.conf.
Kind regards, Christopher -- System Information: Debian Release: lenny/sid Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.26-1-amd64 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages checksecurity depends on: ii cron 3.0pl1-104 management of regular background p ii debconf [debconf-2.0] 1.5.22 Debian configuration management sy ii perl 5.10.0-13 Larry Wall's Practical Extraction Versions of packages checksecurity recommends: ii logcheck 1.2.68 mails anomalies in the system logf pn tiger <none> (no description available) ii tripwire 2.3.1.2.0-12 file and directory integrity check -- debconf information: checksecurity/oldconf:
--- /etc/checksecurity/check-setuid.conf.orig 2008-10-16 13:49:28.000000000 +0200 +++ /etc/checksecurity/check-setuid.conf 2008-10-16 13:49:42.000000000 +0200 @@ -48,7 +48,7 @@ # Use temp variables to build up CHECKSECURITY_FILTER, to make it # a little more readable. # -CS_NFSAFS='(type (nfs|afs|coda|mfs|nnpfs)|^(arla .* type xfs))' +CS_NFSAFS='(type (nfs|afs|coda|lustre|mfs|nnpfs)|^(arla .* type xfs))' # Uncomment the next line to get the old behaviour. #CS_NFSAFS='(nfs|afs) \(.*(nosuid|noexec).*nodev.*\)' #