[Core] Ignore mapped files not found on filesystem (stat) to suppress…

… chroot false positives (closes #152; closes #158).
liske · Dec 19, 2019 · 4271153 · 4271153
1 parent 43db49a
commit 4271153
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/ChangeLog b/ChangeLog
@@ -18,6 +18,10 @@ needrestart (3.5) unstable; urgency=high
       (github pull request #163 by Simon Brand @brandsimon)
     - [UI] Don't fail when terminal has zero columns width.
       (github pull request #167 by @libnoon)
+    - [Core] Ignore mapped files not found on filesystem (stat) to suppress
+      chroot false positives.
+      (github issue #158 by @mphilipps)
+      (github issue #152 by Ivan Kurnosov @zerkms and @djl)
 
  -- Thomas Liske <thomas@fiasko-nw.net>  
 

diff --git a/ex/needrestart.conf b/ex/needrestart.conf
@@ -183,9 +183,9 @@ $nrconf{blacklist_mappings} = [
 
 # Verify mapped files in fileystem:
 # 0 : enabled (default)
-# -1: ignore non-existing files, workaround for broken grsecurity kernels
+# -1: ignore non-existing files, workaround for chroots and broken grsecurity kernels
 # 1 : disable check completely, rely on content of maps file only
-$nrconf{skip_mapfiles} = (-d '/proc/sys/kernel/grsecurity' ? -1 : 0);
+$nrconf{skip_mapfiles} = -1;
 
 # Enable/disable hints on pending kernel upgrades:
 #  1: requires the user to acknowledge pending kernels