samduy / provenance-analysis

Program Provenance Analysis
1 stars 1 forks source link

[Algorithm D][interesting_dirs.list] Check if the directory is managed by APT #21

Closed samduy closed 7 years ago

samduy commented 7 years ago

Even there are some files in the directory installed manually, if the directory itself is managed by APT (or any other package manager), it is also out of scope. We don't care that one.

samduy commented 7 years ago

Solution: after extracting the packages directories list of interesting files, we check if any of them appear in the list of files that installed by APT, and remove it from our result.

For e.g: there is a package directory

/path/to/package_A/

And in the list of files installed by APT (apt_sorted.list), there are some files as following:

/path/to/package_A/file_x.py
/path/to/package_A/file_y.pyc

(Note that: file_x.py and file_y.pyc are not interesting files and already removed from our interesting.list).

Even though there are some other files which are interesting (e.g. file_a.py, file_b.sh) in the same directory ( /path/to/package_A/), the directory itself still be considered not-interesting, and should be removed from the interesting directories list).