Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Owncloud reports there were problems with code integrity check #421

Open
adilhasan opened this issue Aug 18, 2020 · 0 comments
Open

Owncloud reports there were problems with code integrity check #421

adilhasan opened this issue Aug 18, 2020 · 0 comments

Comments

@adilhasan
Copy link

Steps to reproduce

  1. Install the latest version of Guests
  2. You should then see a yellow banner stating that there is a problem with the integrity check

Expected behaviour

I think that there should be no yellow banner appearing

Actual behaviour

I get: "There were problems with the code integrity check" and then clicking on that I see the following (sorry it's a lot of files):

Technical information

The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results

  • guests
    • EXTRA_FILE
      • guests/CHANGELOG.md
      • guests/LICENSE
      • guests/README.md
      • guests/appinfo/app.php
      • guests/appinfo/info.xml
      • guests/appinfo/routes.php
      • guests/appinfo/signature.json
      • guests/js/app.js
      • guests/js/guests.js
      • guests/js/guestshare.js
      • guests/js/navigation.js
      • guests/l10n/.tx/config
      • guests/l10n/af_ZA.js
      • guests/l10n/af_ZA.json
      • guests/l10n/cs_CZ.js
      • guests/l10n/cs_CZ.json
      • guests/l10n/da.js
      • guests/l10n/da.json
      • guests/l10n/de.js
      • guests/l10n/de.json
      • guests/l10n/de_DE.js
      • guests/l10n/de_DE.json
      • guests/l10n/el.js
      • guests/l10n/el.json
      • guests/l10n/en_GB.js
      • guests/l10n/en_GB.json
      • guests/l10n/es.js
      • guests/l10n/es.json
      • guests/l10n/fr.js
      • guests/l10n/fr.json
      • guests/l10n/gl.js
      • guests/l10n/gl.json
      • guests/l10n/he.js
      • guests/l10n/he.json
      • guests/l10n/is.js
      • guests/l10n/is.json
      • guests/l10n/it.js
      • guests/l10n/it.json
      • guests/l10n/ja.js
      • guests/l10n/ja.json
      • guests/l10n/ko.js
      • guests/l10n/ko.json
      • guests/l10n/lt_LT.js
      • guests/l10n/lt_LT.json
      • guests/l10n/mk.js
      • guests/l10n/mk.json
      • guests/l10n/nb_NO.js
      • guests/l10n/nb_NO.json
      • guests/l10n/nl.js
      • guests/l10n/nl.json
      • guests/l10n/pl.js
      • guests/l10n/pl.json
      • guests/l10n/pt_BR.js
      • guests/l10n/pt_BR.json
      • guests/l10n/pt_PT.js
      • guests/l10n/pt_PT.json
      • guests/l10n/ru.js
      • guests/l10n/ru.json
      • guests/l10n/sk_SK.js
      • guests/l10n/sk_SK.json
      • guests/l10n/sl.js
      • guests/l10n/sl.json
      • guests/l10n/sq.js
      • guests/l10n/sq.json
      • guests/l10n/sv.js
      • guests/l10n/sv.json
      • guests/l10n/th_TH.js
      • guests/l10n/th_TH.json
      • guests/l10n/uk.js
      • guests/l10n/uk.json
      • guests/l10n/zh_CN.js
      • guests/l10n/zh_CN.json
      • guests/lib/AppInfo/Application.php
      • guests/lib/AppWhitelist.php
      • guests/lib/Controller/RegisterController.php
      • guests/lib/Controller/SettingsController.php
      • guests/lib/Controller/UsersController.php
      • guests/lib/GroupBackend.php
      • guests/lib/Hooks.php
      • guests/lib/Mail.php
      • guests/lib/Settings/Admin.php
      • guests/templates/form.password.php
      • guests/templates/mail/altinvite.php
      • guests/templates/mail/invite.php
      • guests/templates/settings/admin.php

Server configuration

Operating system:
Linux
Web server:
Apache

Database:
MySQL

PHP version:
7.4.3

ownCloud version: (see ownCloud admin page)
10.5.0.4

Updated from an older ownCloud or fresh install:
It has been updated from a previous version. We are using the latest version of Guests at the moment.

Where did you install ownCloud from:
From the Owncloud official pages

Signing status:
I think that things are signed.

Login as admin user into your ownCloud and access 
http://example.com/index.php/settings/integrity/failed 
paste the results into https://gist.github.com/ and puth the link here.

The content of config/config.php:

Log in to the web-UI with an administrator account and click on
'admin' -> 'Generate Config Report' -> 'Download ownCloud config report'
This report includes the config.php settings, the list of activated apps
and other details in a well sanitized form.

or 

If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your ownCloud installation folder

*ATTENTION:* Do not post your config.php file in public as is. Please use one of the above
methods whenever possible. Both, the generated reports from the web-ui and from occ config:list
consistently remove sensitive data. You still may want to review the report before sending.
If done manually then it is critical for your own privacy to dilligently
remove *all* host names, passwords, usernames, salts and other credentials before posting.
You should assume that attackers find such information and will use them against your systems.

List of activated apps:

If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your ownCloud installation folder.

Are you using external storage, if yes which one: local/smb/sftp/...

Are you using encryption: yes/no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...

LDAP configuration (delete this part if not used)

With access to your command line run e.g.:
sudo -u www-data php occ ldap:show-config
from within your ownCloud installation folder

Without access to your command line download the data/owncloud.db to your local
computer or access your SQL server remotely and run the select query:
SELECT * FROM `oc_appconfig` WHERE `appid` = 'user_ldap';


Eventually replace sensitive data as the name/IP-address of your LDAP server or groups.

Client configuration

Browser:

Operating system:

Logs

Web server error log

Insert your webserver log here

ownCloud log (data/owncloud.log)

Insert your ownCloud log here

Browser log

Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log 
c) ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant