From e22bb69cb6d6f0b0c99d46cddc2bffc69707a680 Mon Sep 17 00:00:00 2001 From: Franco Fichtner Date: Fri, 7 Aug 2020 12:46:25 +0200 Subject: [PATCH] firmware: ignore man page database regeneration Looks like on the running system and in the build system the values are static but obviously going from build to running system the regenerate causes the checksums to shift. Not a security issue for the "man" page databadse so better to hide these files from the audit to avoid confusion and questions. PR: https://forum.opnsense.org/index.php?topic=18484.0 --- src/opnsense/scripts/firmware/health.sh | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/opnsense/scripts/firmware/health.sh b/src/opnsense/scripts/firmware/health.sh index f23b47844..e338ea33f 100755 --- a/src/opnsense/scripts/firmware/health.sh +++ b/src/opnsense/scripts/firmware/health.sh @@ -1,6 +1,6 @@ #!/bin/sh -# Copyright (C) 2017-2019 Franco Fichtner +# Copyright (C) 2017-2020 Franco Fichtner # All rights reserved. # # Redistribution and use in source and binary forms, with or without @@ -48,6 +48,8 @@ MTREE_PATTERNS=" ./etc/shells ./etc/spwd.db ./etc/ttys +./usr/share/man/mandoc.db +./usr/share/openssl/man/mandoc.db " GREP_PATTERNS=