lynis
lynis copied to clipboard
False positive in reboot detection with kernel symlink
Describe the bug
Tumbleweed recently moved the kernel from /boot
to /usr
, and thus vmlinuz-*
is a symlink to the kernel's modules directory. This triggers a false positive in Lynis.
Version
- Distribution [e.g. Ubuntu 18.04]: openSUSE Tumbleweed
- Lynis version [e.g. 2.7.0]: 3.0.6
Expected behavior Lynis should not show that a reboot is needed.
Output
2021-11-30 00:58:46 Performing test ID KRNL-5830 (Checking if system is running on the latest installed kernel)
2021-11-30 00:58:46 Test: Checking presence /var/run/reboot-required.pkgs
2021-11-30 00:58:46 Result: file /var/run/reboot-required.pkgs not found
2021-11-30 00:58:46 Result: /boot exists, performing more tests from here
2021-11-30 00:58:46 Result: found /boot/vmlinuz-5.15.5-1-default
2021-11-30 00:58:46 Result: found a symlink, retrieving destination
2021-11-30 00:58:46 Result: destination file is ../usr/lib/modules/5.15.5-1-default/vmlinuz
2021-11-30 00:58:46 Result: version derived from file name is '../usr/lib/modules/5.15.5-1-default/vmlinuz'
2021-11-30 00:58:46 Result: found version ../usr/lib/modules/5.15.5-1-default/vmlinuz
2021-11-30 00:58:46 Result: active kernel version 5.15.5-1-default
2021-11-30 00:58:46 Result: reboot needed, as there is a difference between active kernel and the one on disk