Debian Netfilter Packaging Team

At the time of the last Lintian run, the following possible problems were found in packages maintained by Debian Netfilter Packaging Team <pkg-netfilter-team@lists.alioth.debian.org>, listed by source package. See also the report showing only errors and warnings. Also see their QA overview.

• X debian-watch-does-not-check-gpg-signature
• I debian-watch-uses-insecure-uri
  • http://ftp.netfilter.org/pub/conntrack-tools/conntrack-tools-(\S+)\.tar\.bz2
• X upstream-metadata-file-is-missing
• I vcs-field-not-canonical
  • https://salsa.debian.org/pkg-netfilter-team/pkg-conntrack-tools https://salsa.debian.org/pkg-netfilter-team/pkg-conntrack-tools.git

conntrack

• X binary-file-built-without-LFS-support
  • usr/sbin/conntrack
• I hardening-no-bindnow
  • usr/sbin/conntrack [amd64, i386]
• I spelling-error-in-binary
  • usr/sbin/conntrack addres address [amd64, i386]
• I spelling-error-in-manpage
  • usr/share/man/man8/conntrack.8.gz comparision comparison [amd64, i386]

conntrackd

• X binary-file-built-without-LFS-support
  • usr/sbin/conntrackd
• I hardening-no-bindnow
  • usr/lib/i386-linux-gnu/conntrack-tools/ct_helper_amanda.so
  • usr/lib/i386-linux-gnu/conntrack-tools/ct_helper_dhcpv6.so
  • usr/lib/i386-linux-gnu/conntrack-tools/ct_helper_ftp.so
  • usr/lib/i386-linux-gnu/conntrack-tools/ct_helper_mdns.so
  • usr/lib/i386-linux-gnu/conntrack-tools/ct_helper_rpc.so
  • usr/lib/i386-linux-gnu/conntrack-tools/ct_helper_sane.so
  • usr/lib/i386-linux-gnu/conntrack-tools/ct_helper_ssdp.so
  • usr/lib/i386-linux-gnu/conntrack-tools/ct_helper_tftp.so
  • usr/lib/i386-linux-gnu/conntrack-tools/ct_helper_tns.so
  • usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_amanda.so
  • usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_dhcpv6.so
  • usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_ftp.so
  • usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_mdns.so
  • usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_rpc.so
  • usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_sane.so
  • usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_ssdp.so
  • usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_tftp.so
  • usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_tns.so
  • usr/sbin/conntrackd
• I init.d-script-does-not-implement-status-option
  • etc/init.d/conntrackd
• I spelling-error-in-manpage
  • usr/share/man/man5/conntrackd.conf.5.gz prefered preferred
  • usr/share/man/man5/conntrackd.conf.5.gz technlogy technology

nfct

• X binary-file-built-without-LFS-support
  • usr/sbin/nfct
• I hardening-no-bindnow
  • usr/sbin/nfct
• I spelling-error-in-binary
  • usr/sbin/nfct Allows to Allows one to
• I spelling-error-in-manpage
  • usr/share/man/man8/nfct.8.gz allows to allows one to

• W debian-source-options-has-custom-compression-settings
  • compression = "xz" (line 1)
• X debian-watch-does-not-check-gpg-signature
• O debian-watch-uses-insecure-uri
  • ftp://netfilter.org/pub/ipset/ipset-(.*)\.tar.bz2
• P file-contains-trailing-whitespace
  • debian/changelog (line 161)
• X upstream-metadata-file-is-missing

ipset

• X binary-file-built-without-LFS-support
  • sbin/ipset [amd64, i386]
• O shell-script-fails-syntax-check
  • usr/share/bash-completion/completions/ipset [amd64, i386]

libipset11

• X binary-file-built-without-LFS-support
  • lib/i386-linux-gnu/libipset.so.11.1.0
• I symbols-file-missing-build-depends-package-field

• X debian-watch-does-not-check-gpg-signature
• I debian-watch-uses-insecure-uri
  • http://netfilter.org/projects/iptables/files/iptables-(\S+).tar.bz2
• P package-uses-old-debhelper-compat-version
  • 10
• W patch-file-present-but-not-mentioned-in-series
  • notes
• W spelling-error-in-patch-description
  • debian/patches/0103-lintian_allows_to.patch allows to allows one to
  • debian/patches/0401-580941-iptables_apply_update.patch sucessful successful
• I unused-file-paragraph-in-dep5-copyright
  • paragraph at line 23
• X upstream-metadata-file-is-missing
• I vcs-field-not-canonical
  • https://salsa.debian.org/pkg-netfilter-team/pkg-iptables https://salsa.debian.org/pkg-netfilter-team/pkg-iptables.git
• I wildcard-matches-nothing-in-dep5-copyright
  • extensions/libebt_limit.c (paragraph at line 23)

iptables

• W command-with-path-in-maintainer-script
  • postinst:10 /sbin/ip6tables
  • postinst:11 /sbin/ip6tables-save
  • postinst:8 /sbin/iptables-save
  • postinst:9 /sbin/iptables-restore
  • prerm:17 /sbin/iptables-save
  • prerm:18 /sbin/iptables-restore
  • prerm:19 /sbin/ip6tables
  • prerm:20 /sbin/ip6tables-save
• I spelling-error-in-binary
  • usr/lib/i386-linux-gnu/xtables/libxt_addrtype.so iif if
  • usr/lib/i386-linux-gnu/xtables/libxt_multiport.so expection exception
  • usr/lib/i386-linux-gnu/xtables/libxt_rpfilter.so iif if
  • usr/lib/x86_64-linux-gnu/xtables/libxt_addrtype.so iif if
  • usr/lib/x86_64-linux-gnu/xtables/libxt_multiport.so expection exception
  • usr/lib/x86_64-linux-gnu/xtables/libxt_rpfilter.so iif if
  • usr/sbin/xtables-nft-multi harware hardware
• I spelling-error-in-manpage
  • usr/share/man/man8/iptables-extensions.8.gz aformentioned aforementioned
  • usr/share/man/man8/nfnl_osf.8.gz allows to allows one to
  • usr/share/man/man8/xtables-monitor.8.gz allows to allows one to
• W spelling-error-in-readme-debian
  • writting writing

libiptc0-dbgsym

• W debug-file-with-no-debug-symbols
  • usr/lib/debug/.build-id/b0/dcd26efed56d55627f5a37ab669dc51822a93d.debug
  • usr/lib/debug/.build-id/cd/3f2e79bec8bfc183e8df1ec5fe2b3a55925b65.debug

libxtables12

• X shlib-calls-exit
  • usr/lib/i386-linux-gnu/libxtables.so.12.2.0
  • usr/lib/x86_64-linux-gnu/libxtables.so.12.2.0

• X debian-watch-does-not-check-gpg-signature
• P debug-symbol-migration-possibly-complete
  • --dbgsym-migration='libnetfilter-acct1-dbg (<< 1.0.2-2~)' (line 9)
• P package-does-not-install-examples
  • examples/
• I testsuite-autopkgtest-missing
• X upstream-metadata-file-is-missing

libnetfilter-acct1

• I extended-description-is-probably-too-short
• I no-symbols-control-file
  • usr/lib/i386-linux-gnu/libnetfilter_acct.so.1.0.0 [amd64, i386]
  • usr/lib/x86_64-linux-gnu/libnetfilter_acct.so.1.0.0 [amd64, i386]

• X debian-watch-does-not-check-gpg-signature
• I debian-watch-uses-insecure-uri
  • http://ftp.netfilter.org/pub/libnetfilter_conntrack/libnetfilter_conntrack-(\S+).tar.bz2
• P debug-symbol-migration-possibly-complete
  • --dbgsym-migration='libnetfilter-conntrack3-dbg (<< 1.0.6-2~)' (line 6)
• P file-contains-trailing-whitespace
  • debian/changelog (line 118)
  • debian/changelog (line 136)
  • debian/changelog (line 173)
  • debian/changelog (line 79)
  • debian/changelog (line 92)
  • debian/changelog (line 93)
  • debian/rules (line 10)
  • debian/rules (line 11)
• P insecure-copyright-format-uri
  • http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
• I out-of-date-standards-version
  • 3.9.8 (released 2016-04-06) (current is 4.3.0)
• P package-does-not-install-examples
  • examples/
• P package-uses-old-debhelper-compat-version
  • 9
• I testsuite-autopkgtest-missing
• X upstream-metadata-file-is-missing

libnetfilter-conntrack3

• X binary-file-built-without-LFS-support
  • usr/lib/i386-linux-gnu/libnetfilter_conntrack.so.3.7.0
• I extended-description-is-probably-too-short
• I hardening-no-bindnow
  • usr/lib/i386-linux-gnu/libnetfilter_conntrack.so.3.7.0
  • usr/lib/x86_64-linux-gnu/libnetfilter_conntrack.so.3.7.0
• I no-symbols-control-file
  • usr/lib/i386-linux-gnu/libnetfilter_conntrack.so.3.7.0
  • usr/lib/x86_64-linux-gnu/libnetfilter_conntrack.so.3.7.0

• I debian-control-has-obsolete-dbg-package
  • libnetfilter-queue1-dbg
• X debian-watch-does-not-check-gpg-signature
• I debian-watch-uses-insecure-uri
  • http://www.netfilter.org/projects/libnetfilter_queue/files/libnetfilter_queue-(\S+)\.tar\.bz2
• P package-does-not-install-examples
  • examples/
• I testsuite-autopkgtest-missing
• X upstream-metadata-file-is-missing
• I vcs-field-not-canonical
  • https://salsa.debian.org/pkg-netfilter-team/pkg-libnetfilter-queue https://salsa.debian.org/pkg-netfilter-team/pkg-libnetfilter-queue.git

libnetfilter-queue1

• I hardening-no-bindnow
  • usr/lib/i386-linux-gnu/libnetfilter_queue.so.1.4.0
  • usr/lib/x86_64-linux-gnu/libnetfilter_queue.so.1.4.0
• I no-symbols-control-file
  • usr/lib/i386-linux-gnu/libnetfilter_queue.so.1.4.0
  • usr/lib/x86_64-linux-gnu/libnetfilter_queue.so.1.4.0

• I debian-watch-uses-insecure-uri
  • http://ftp.netfilter.org/pub/libnftnl/libnftnl-(\S+).tar.bz2
• P debug-symbol-migration-possibly-complete
  • --dbgsym-migration='libnftnl-dbg (<< 1.0.7-2~)' (line 12)
• I public-upstream-key-not-minimal
  • upstream/signing-key.asc has 1 extra signature(s) for keyid AB4655A126D292E4
• I testsuite-autopkgtest-missing
• I unused-file-paragraph-in-dep5-copyright
  • paragraph at line 28
  • paragraph at line 45
• X upstream-metadata-file-is-missing
• I vcs-field-not-canonical
  • https://salsa.debian.org/pkg-netfilter-team/pkg-libnftnl https://salsa.debian.org/pkg-netfilter-team/pkg-libnftnl.git
• I wildcard-matches-nothing-in-dep5-copyright
  • examples/nft-chain-parse-add.c (paragraph at line 45)
  • examples/nft-rule-parse-add.c (paragraph at line 45)
  • examples/nft-set-parse-add.c (paragraph at line 45)
  • examples/nft-table-parse-add.c (paragraph at line 45)
  • src/jansson.c (paragraph at line 28)

libnftnl11

• X shlib-calls-exit
  • usr/lib/i386-linux-gnu/libnftnl.so.11.0.0
  • usr/lib/x86_64-linux-gnu/libnftnl.so.11.0.0
• I symbols-file-missing-build-depends-package-field

• X debian-watch-does-not-check-gpg-signature
• I testsuite-autopkgtest-missing
• X upstream-metadata-file-is-missing

nfacct

• I spelling-error-in-manpage
  • usr/share/man/man8/nfacct.8.gz allows to allows one to [amd64, i386]

• W debian-watch-could-verify-download
  • debian/upstream/signing-key.asc
• X debian-watch-does-not-check-gpg-signature
• I debian-watch-uses-insecure-uri
  • http://ftp.netfilter.org/pub/nftables/nftables-((?!0.100|0.099)\S+).tar.bz2
• P debug-symbol-migration-possibly-complete
  • --dbgsym-migration='nftables-dbg (<< 0.7~)' (line 26)
• W orig-tarball-missing-upstream-signature
  • nftables_0.9.0.orig.tar.bz2
• I out-of-date-standards-version
  • 4.1.4 (released 2018-04-05) (current is 4.3.0)
• I public-upstream-key-not-minimal
  • upstream/signing-key.asc has 3 extra signature(s) for keyid A4111F89BB5F58CC
• X upstream-metadata-file-is-missing
• I vcs-field-not-canonical
  • https://salsa.debian.org/pkg-netfilter-team/pkg-nftables https://salsa.debian.org/pkg-netfilter-team/pkg-nftables.git
• I wildcard-matches-nothing-in-dep5-copyright
  • include/nftables/nftables.h (paragraph at line 9)

libnftables0

• X binary-file-built-without-LFS-support
  • usr/lib/i386-linux-gnu/libnftables.so.0.0.0
• I no-symbols-control-file
  • usr/lib/i386-linux-gnu/libnftables.so.0.0.0
  • usr/lib/x86_64-linux-gnu/libnftables.so.0.0.0
• X shlib-calls-exit
  • usr/lib/i386-linux-gnu/libnftables.so.0.0.0
  • usr/lib/x86_64-linux-gnu/libnftables.so.0.0.0
• I spelling-error-in-binary
  • usr/lib/i386-linux-gnu/libnftables.so.0.0.0 iif if
  • usr/lib/x86_64-linux-gnu/libnftables.so.0.0.0 iif if

nftables

• W maintainer-script-should-not-use-dpkg-maintscript-helper
  • postinst:11 [amd64, i386]
  • postinst:15 [amd64, i386]
  • postinst:19 [amd64, i386]
  • postinst:23 [amd64, i386]
  • postinst:27 [amd64, i386]
  • postinst:31 [amd64, i386]
  • postinst:35 [amd64, i386]
  • postinst:39 [amd64, i386]
  • postinst:7 [amd64, i386]
  • postrm:11 [amd64, i386]
  • postrm:15 [amd64, i386]
  • postrm:19 [amd64, i386]
  • postrm:23 [amd64, i386]
  • postrm:27 [amd64, i386]
  • postrm:31 [amd64, i386]
  • postrm:35 [amd64, i386]
  • postrm:39 [amd64, i386]
  • postrm:7 [amd64, i386]
  • preinst:11 [amd64, i386]
  • preinst:15 [amd64, i386]
  • preinst:19 [amd64, i386]
  • preinst:23 [amd64, i386]
  • preinst:27 [amd64, i386]
  • preinst:31 [amd64, i386]
  • preinst:35 [amd64, i386]
  • preinst:39 [amd64, i386]
  • preinst:7 [amd64, i386]
• W manpage-has-errors-from-man
  • usr/share/man/man8/nft.8.gz 524: warning [p 5, 9.0i, div '3tbd2,3', 0.5i]: cannot adjust line [amd64, i386]
• I spelling-error-in-manpage
  • usr/share/man/man8/nft.8.gz allow to allow one to [amd64, i386]
  • usr/share/man/man8/nft.8.gz allows to allows one to [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]
  • usr/share/man/man8/nft.8.gz iif if [amd64, i386]

• I debian-watch-uses-insecure-uri
  • ftp://ftp.netfilter.org/pub/ulogd/ulogd-(.*)\.tar\.bz2
• I public-upstream-key-not-minimal
  • upstream/signing-key.asc has 3 extra signature(s) for keyid A4111F89BB5F58CC
• I testsuite-autopkgtest-missing
• X upstream-metadata-file-is-missing

ulogd2 (2.0.7-1+b1; main)

• X binary-file-built-without-LFS-support
  • usr/lib/i386-linux-gnu/ulogd/ulogd_inppkt_UNIXSOCK.so
  • usr/lib/i386-linux-gnu/ulogd/ulogd_output_GPRINT.so
  • usr/lib/i386-linux-gnu/ulogd/ulogd_output_LOGEMU.so
  • usr/lib/i386-linux-gnu/ulogd/ulogd_output_NACCT.so
  • usr/lib/i386-linux-gnu/ulogd/ulogd_output_OPRINT.so
  • usr/lib/i386-linux-gnu/ulogd/ulogd_output_XML.so
  • usr/sbin/ulogd
• O hardening-no-fortify-functions
  • usr/lib/i386-linux-gnu/ulogd/ulogd_filter_PWSNIFF.so
  • usr/lib/i386-linux-gnu/ulogd/ulogd_inppkt_NFLOG.so
  • usr/lib/i386-linux-gnu/ulogd/ulogd_inppkt_UNIXSOCK.so
  • usr/lib/x86_64-linux-gnu/ulogd/ulogd_filter_PWSNIFF.so
  • usr/lib/x86_64-linux-gnu/ulogd/ulogd_inppkt_NFLOG.so
  • usr/lib/x86_64-linux-gnu/ulogd/ulogd_inppkt_UNIXSOCK.so
• O non-standard-file-perm
  • etc/ulogd.conf 0600 != 0644
• X shlib-calls-exit
  • usr/lib/i386-linux-gnu/ulogd/ulogd_inppkt_UNIXSOCK.so
  • usr/lib/x86_64-linux-gnu/ulogd/ulogd_inppkt_UNIXSOCK.so
• X systemd-service-file-missing-hardening-features
  • lib/systemd/system/ulogd2.service

ulogd2-json (2.0.7-1+b1; main)

• X binary-file-built-without-LFS-support
  • usr/lib/i386-linux-gnu/ulogd/ulogd_output_JSON.so

ulogd2-pcap (2.0.7-1+b1; main)

• X binary-file-built-without-LFS-support
  • usr/lib/i386-linux-gnu/ulogd/ulogd_output_PCAP.so