lynis icon indicating copy to clipboard operation
lynis copied to clipboard

False positive in reboot detection with kernel symlink

Open Vogtinator opened this issue 2 years ago • 0 comments

Describe the bug Tumbleweed recently moved the kernel from /boot to /usr, and thus vmlinuz-* is a symlink to the kernel's modules directory. This triggers a false positive in Lynis.

Version

  • Distribution [e.g. Ubuntu 18.04]: openSUSE Tumbleweed
  • Lynis version [e.g. 2.7.0]: 3.0.6

Expected behavior Lynis should not show that a reboot is needed.

Output

2021-11-30 00:58:46 Performing test ID KRNL-5830 (Checking if system is running on the latest installed kernel)
2021-11-30 00:58:46 Test: Checking presence /var/run/reboot-required.pkgs
2021-11-30 00:58:46 Result: file /var/run/reboot-required.pkgs not found
2021-11-30 00:58:46 Result: /boot exists, performing more tests from here
2021-11-30 00:58:46 Result: found /boot/vmlinuz-5.15.5-1-default
2021-11-30 00:58:46 Result: found a symlink, retrieving destination
2021-11-30 00:58:46 Result: destination file is ../usr/lib/modules/5.15.5-1-default/vmlinuz
2021-11-30 00:58:46 Result: version derived from file name is '../usr/lib/modules/5.15.5-1-default/vmlinuz'
2021-11-30 00:58:46 Result: found version ../usr/lib/modules/5.15.5-1-default/vmlinuz
2021-11-30 00:58:46 Result: active kernel version 5.15.5-1-default
2021-11-30 00:58:46 Result: reboot needed, as there is a difference between active kernel and the one on disk

Vogtinator avatar Nov 30 '21 10:11 Vogtinator