Package: packagekit Version: 0.8.17-2 Severity: serious I got a warning from debsums that the transactions database had been modified. Packages should not modify files shipped in the deb. Below is the diff of the sqlite3 .dump of the original file from the deb and the file on my filesystem. Clearly this database should be created at runtime by the packagekit daemon instead of shipped in the package.
/etc/cron.monthly/debsums:
/var/lib/PackageKit/transactions.db
pabs@chianamo ~ $ cat diff
--- 1 2014-04-29 09:30:51.008978665 +0800
+++ 2 2014-04-29 09:28:58.417555803 +0800
@@ -1,7 +1,17 @@
PRAGMA foreign_keys=OFF;
BEGIN TRANSACTION;
CREATE TABLE transactions (transaction_id TEXT PRIMARY KEY, timespec TEXT,
duration INTEGER, succeeded INTEGER DEFAULT 0, role TEXT, data TEXT,
description TEXT, uid INTEGER DEFAULT 0, cmdline TEXT);
+INSERT INTO "transactions"
VALUES('/3_babcaecb','2014-04-24T07:36:19.575219Z',10007,0,'update-packages',NULL,NULL,1000,NULL);
+INSERT INTO "transactions"
VALUES('/3_ecdebcea','2014-04-25T08:36:21.601458Z',1679,1,'update-packages',NULL,NULL,1000,NULL);
+INSERT INTO "transactions"
VALUES('/3_bdcbccdd','2014-04-26T09:36:18.783232Z',757,1,'update-packages',NULL,NULL,1000,NULL);
+INSERT INTO "transactions"
VALUES('/3_ecdabebc','2014-04-27T12:52:55.648922Z',12199,1,'update-packages','downloading
network-manager-dbg;0.9.8.8-7;amd64;testing network management framework
(debugging symbols)
+downloading network-manager;0.9.8.8-7;amd64;testing network management
framework (daemon and userspace tools)',NULL,1000,NULL);
+INSERT INTO "transactions"
VALUES('/3_bddeaeab','2014-04-28T13:42:47.881452Z',639,1,'update-packages',NULL,NULL,1000,NULL);
CREATE TABLE last_action (role TEXT PRIMARY KEY, timespec TEXT);
+INSERT INTO "last_action" VALUES('get-updates','2014-04-28T13:42:47.852767Z');
+INSERT INTO "last_action"
VALUES('update-packages','2014-04-28T13:42:48.523333Z');
CREATE TABLE config (key TEXT PRIMARY KEY, value TEXT);
CREATE TABLE proxy (created TEXT, proxy_http TEXT, proxy_https TEXT, proxy_ftp
TEXT, proxy_socks TEXT, no_proxy TEXT, pac TEXT, uid INTEGER, session TEXT);
+INSERT INTO "proxy"
VALUES('2014-04-21T05:58:30.493843Z',NULL,'',NULL,'','','',1000,'/org/freedesktop/logind/session-2');
+INSERT INTO "proxy"
VALUES('2014-04-27T12:42:41.215312Z',NULL,'',NULL,'','','',1000,'/org/freedesktop/logind/session-4');
COMMIT;
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (900, 'testing'), (800, 'unstable'), (700, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.13-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages packagekit depends on:
ii libc6 2.18-4
ii libglib2.0-0 2.40.0-2
ii libglib2.0-bin 2.40.0-2
ii libpackagekit-glib2-16 0.8.17-2
ii libpolkit-gobject-1-0 0.105-4
ii libsqlite3-0 3.8.4.3-1
ii libsystemd-journal0 204-8
ii libsystemd-login0 204-8
ii packagekit-backend-aptcc 0.8.17-2
ii policykit-1 0.105-4
Versions of packages packagekit recommends:
pn packagekit-tools <none>
Versions of packages packagekit suggests:
pn packagekit-backend-smart <none>
-- debsums errors found:
debsums: changed file /var/lib/PackageKit/transactions.db (from packagekit
package)
--
bye,
pabs
http://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part
