chkboot
chkboot copied to clipboard
random-seed file of systemd-boot gives warning at every boot
May be that could be realted to issue #2, but it is a little different.
Since systemd-boot changes the /boot/loader/random-seed file on the ESP partition that you are encourage to mount at /boot with systemd-boot, one gets a warning at every boot.
So, if feasable, it would be good that that file was ignored to avoid triggereing a warning/false alarm.
I submit that naive fix/work-around:
--- src/chkboot-1.3/chkboot 2020-01-07 19:34:30.459462693 +0100
+++ src/chkboot-1.3/chkboot 2019-04-16 23:00:54.000000000 +0200
@@ -68,7 +68,7 @@
pushd "$BOOTDIR" > /dev/null 2>&1
files=`find . -type f` # get file infos
- files=`echo $files | sed "s/.\/grub\/grubenv//"` # remove files that should be skipped
+ files=`echo $files | sed -e "s/.\/grub\/grubenv//" -e "s/\.\/loader\/random-seed//"` # remove files that should be skipped
# generate hashes of each file
for fname in $files; do
That should be security scrutinized to check if it does not introduce any security hole