From owner-freebsd-security@FreeBSD.ORG Fri Jan 23 22:20:16 2015 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 81B328FE for ; Fri, 23 Jan 2015 22:20:16 +0000 (UTC) Received: from away.numachi.com (away.numachi.com [66.228.38.138]) by mx1.freebsd.org (Postfix) with SMTP id 325B5C46 for ; Fri, 23 Jan 2015 22:20:15 +0000 (UTC) Received: (qmail 24843 invoked from network); 23 Jan 2015 22:20:07 -0000 Received: from unknown (HELO meisai.numachi.com) (71.181.44.212) by away.numachi.com with SMTP; 23 Jan 2015 22:20:07 -0000 Received: (qmail 96215 invoked by uid 1001); 23 Jan 2015 21:57:38 -0000 Date: Fri, 23 Jan 2015 16:57:38 -0500 From: Brian Reichert To: Garrett Wollman Subject: Re: Strange package checksum report Message-ID: <20150123215738.GT80181@numachi.com> References: <21698.32224.747971.146491@khavrinen.csail.mit.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <21698.32224.747971.146491@khavrinen.csail.mit.edu> User-Agent: Mutt/1.5.9i Cc: freebsd-security@freebsd.org X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Jan 2015 22:20:16 -0000 On Fri, Jan 23, 2015 at 11:59:12AM -0500, Garrett Wollman wrote: > On some of my machines, I've been noticing the following in the > nightly security mail: The *.pyc are blobs of byte code that Python generates if the interpreter chooses to compile a module. Maybe the package erroneously contains them, and the interpreter is regenerating them, according to whatever logic is would apply. Maybe a timestamp issue? When you do a force reinstall ,what are the timestamps as compared to the corresponding python modules (*.pl)? > > Checking for packages with mismatched checksums: > p5-XML-SAX-0.99_2: /usr/local/lib/perl5/site_perl/XML/SAX/ParserDetails.ini > python27-2.7.9: /usr/local/lib/python2.7/UserDict.pyc > python27-2.7.9: /usr/local/lib/python2.7/_weakrefset.pyc > python27-2.7.9: /usr/local/lib/python2.7/abc.pyc > python27-2.7.9: /usr/local/lib/python2.7/codecs.pyc > python27-2.7.9: /usr/local/lib/python2.7/copy_reg.pyc > python27-2.7.9: /usr/local/lib/python2.7/encodings/__init__.pyc > [ a bunch of other .pyc files elided ] > > Does anyone know what causes this? Force-reinstalling the package > fixes it, but only temporarily -- by the time the next security mail > comes, it's back in this state. > > -GAWollman > > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" -- Brian Reichert BSD admin/developer at large