OPNsense Forum

Archive => 22.7 Legacy Series => Topic started by: manilx on December 28, 2022, 10:03:43 am

Title: fresh install with Audit issues
Post by: manilx on December 28, 2022, 10:03:43 am

Hi

I yesterday started from scratch with a new OPNsense install. Updated all plugins, installed my backup.
Today I ran an Audit and got errors:

Code: [Select]

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 22.7.10_2 (amd64/OpenSSL) at Wed Dec 28 08:57:30 WET 2022
>>> Check installed kernel version
Version 22.7.9 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 22.7.9 is correct.
>>> Check for missing or altered base files
Error 2 ocurred.
etc/sysctl.conf:
size (311, 345)
sha256digest (0x8c57d647047d84b9be4cddbb0b6d58c1d5839f148b62d1137b8bf2611f681cfd, 0x06ec8255e5fdfb4ccaf2059bc0d12c92554e4ba8f92b9d4c51af74ba58ba00c9)
>>> Check installed repositories
SunnyValley
OPNsense
>>> Check installed plugins
os-api-backup 1.0_1
os-crowdsec 1.0.1
os-dmidecode 1.1_1
os-etpro-telemetry 1.6_1
os-intrusion-detection-content-et-open 1.0.1
os-intrusion-detection-content-snort-vrt 1.1_1
os-nextcloud-backup 1.0_1
os-qemu-guest-agent 1.1_1
os-sensei 1.12.2
os-sensei-agent 1.12.2
os-sensei-updater 1.12
os-sunnyvalley 1.2_2
os-wireguard 1.13_3
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: ........
python39-3.9.16: checksum mismatch for /usr/local/lib/python3.9/__pycache__/ipaddress.cpython-39.pyc
python39-3.9.16: checksum mismatch for /usr/local/lib/python3.9/__pycache__/mimetypes.cpython-39.pyc
python39-3.9.16: checksum mismatch for /usr/local/lib/python3.9/__pycache__/queue.cpython-39.pyc
python39-3.9.16: checksum mismatch for /usr/local/lib/python3.9/__pycache__/subprocess.cpython-39.pyc
python39-3.9.16: checksum mismatch for /usr/local/lib/python3.9/__pycache__/zipfile.cpython-39.pyc
Checking all packages..... done
>>> Check for core packages consistency
Core package "opnsense" has 63 dependencies to check.
Checking packages: ................................................................. done
***DONE***
Normal? What should I do?

Thx in advance

Title: Re: fresh install with Audit issues
Post by: eponymous on December 28, 2022, 10:10:20 am

Looks similar to: https://forum.opnsense.org/index.php?topic=31527.0 (https://forum.opnsense.org/index.php?topic=31527.0)

Title: Re: fresh install with Audit issues
Post by: manilx on December 28, 2022, 10:13:32 am

Reinstalled python39 from packages and at least this error is gone but the "Error 2 ocurred.
etc/sysctl.conf:" is still there:

Code: [Select]

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 22.7.10_2 (amd64/OpenSSL) at Wed Dec 28 09:08:20 WET 2022
>>> Check installed kernel version
Version 22.7.9 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 22.7.9 is correct.
>>> Check for missing or altered base files
Error 2 ocurred.
etc/sysctl.conf:
size (311, 345)
sha256digest (0x8c57d647047d84b9be4cddbb0b6d58c1d5839f148b62d1137b8bf2611f681cfd, 0x06ec8255e5fdfb4ccaf2059bc0d12c92554e4ba8f92b9d4c51af74ba58ba00c9)
>>> Check installed repositories
SunnyValley
OPNsense
>>> Check installed plugins
os-api-backup 1.0_1
os-crowdsec 1.0.1
os-dmidecode 1.1_1
os-etpro-telemetry 1.6_1
os-intrusion-detection-content-et-open 1.0.1
os-intrusion-detection-content-snort-vrt 1.1_1
os-nextcloud-backup 1.0_1
os-qemu-guest-agent 1.1_1
os-sensei 1.12.2
os-sensei-agent 1.12.2
os-sensei-updater 1.12
os-sunnyvalley 1.2_2
os-wireguard 1.13_3
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 63 dependencies to check.
Checking packages: ................................................................. done
***DONE***
Yes, seems to be the same.... Nothing I can do there and seems not to matter from what I understand.
I wonder WHY those errors are there on a fresh install and update to latest!?