fedora 40 bug on detecting systemd-analyze version

[garberw]

The question is why does awk fail in the command below. It gives an error message.
I already posted this. It seems someone has deleted it so I will post it again.

I run this script from /etc/cron.daily

#!/bin/sh                                                                                           

set -u
DATE=$(date +%Y%m%d)
HOST=$(hostname)
LOG_DIR="/var/log/lynis"
REPORT="$LOG_DIR/report-${HOST}.${DATE}"
DATA="$LOG_DIR/report-data-${HOST}.${DATE}.txt"

#cd /usr/local/lynis                                                                                
cd /var/log/lynis

# Run Lynis                                                                                         
#./lynis audit system --cronjob > ${REPORT}                                                         
/usr/bin/lynis audit system --cronjob > ${REPORT}

# Optional step: Move report file if it exists                                                      
if [ -f /var/log/lynis-report.dat ]; then
    mv /var/log/lynis-report.dat ${DATA}
fi
# The End                                                                                           

The cron job gives the error:

/etc/cron.daily/lynis.garberw:
/usr/bin/grep: warning: stray \ before -

ANSWER / SOLUTION / FIX

in /usr/share/lynis/include there is a file tests_boot_services which does not detect SYSTEMD_VERSION on my system correctly. So I fixed it by brute force:

(line 1086)
        # garberw                                                                                   
        # echo "garberw SYSTEMDANALYZEBINARY=${SYSTEMDANALYZEBINARY}"                               
        # echo "garberw AWKBINARY           =${AWKBINARY}"                                          
        # SYSTEMD_VERSION=$("${SYSTEMDANALYZEBINARY}" --version | ${AWKBINARY} '/^systemd/ {print $2}')                                                                                                
        # echo "garberw SYSTEMD_VERSION     =${SYSTEMD_VERSION}"                                    
        # garberw added next line                                                                   
        SYSTEMD_VERSION=251
        if [ "${SYSTEMD_VERSION}" -ge 240 ]; then PREQS_MET="YES"; else SKIPREASON="systemd-analyze too old (v${SYSTEMD_VERSION}), need at least v240"; PREQS_MET="NO"; fi
    fi

using the rpm version the awk command fails so I just manually overrided SYSTEMD_VERSION.

[Felipe-53]

Issue opened with no description? Can you elaborate a bit?

[jwadodson]

try this,
grep -E "GREP.\-" /usr/share/lynis/include/

you will see 9 places where a slosh (backslash) preceeds a - (minus)
the fedora grep complains about them. vis.

    /usr/bin/grep: warning: stray \ before -

previously a number of these "errors" occured, but on FC40 it's down to one.
It's hard to know exactly which one of the 9 examples left.

I guess that if there is still a version of grep out there that requires "-" escaped by ""
then a fix might be problematic - hopefully not!

[jwadodson]

Sorry that should have been,
grep -E "GREP.-" /usr/share/lynis/include/*

[jwadodson]

Version in fedora40 is,
lynis.noarch 3.1.1-1.fc40 @fedora

[jwadodson]

Once fixed we have to try to persuade the packager to include it in the next release or
hopefully FC40!

[garberw]

think it is fixed in fedora 40.