Package: aide
Version: 0.11a-4
Severity: important
Looks like upgrade from 0.11a-3 to 0.11a-4 broke my
aide:
cherokee:~# aide --check
Couldn't open file /tmp/empty/aide.db for reading
cherokee:~# echo $?
18
// ENXIO
ATM I was unable to find older .deb on snapshot.debian.net,
so I'll rebuild -3 and -4 on my system to invesigate the
issue further.
Currently I attach the `aide --check` strace from which
you can see that aide doesn't try at all to open
/etc/aide/aide.conf or whatever else config file. And
this is abnormal.
// Debian testing/unstable, linux 2.4.32-grsec
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (990, 'testing'), (500, 'oldstable'), (500, 'unstable'), (500,
'stable'), (1, 'experimental')
Architecture: i386 (i586)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.4.32-grsec
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Versions of packages aide depends on:
ii debconf 1.5.1 Debian configuration management sy
ii liblockfile1 1.06.1 NFS-safe locking library, includes
ii mailx 1:8.1.2-0.20050715cvs-1 A simple mail user agent
ii ucf 2.0010 Update Configuration File: preserv
Versions of packages aide recommends:
ii cron 3.0pl1-94 management of regular background p
-- debconf information:
* aide/aideinit: false
aideinit/overwritenew: true
* aide/mustaideinit:
aideinit/copynew: false
aide/newlibdir: false
* aide/setmailaddress:
aideinit/warnnew:
20378 execve("/usr/bin/aide", ["aide", "--check"], [/* 21 vars */]) = 0
20378 uname({sys="Linux", node="cherokee", ...}) = 0
20378 brk(0) = 0x8154360
20378 brk(0x8154ba4) = 0x8154ba4
20378 set_thread_area({entry_number:-1 -> -1, base_addr:0x8154b8c,
limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1,
seg_not_present:0, useable:1}) = -1 ENOSYS (Function not implemented)
20378 modify_ldt(1, {entry_number:0, base_addr:0x8154b8c, limit:1048575,
seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0,
useable:1}, 16) = 0
20378 brk(0x8175ba4) = 0x8175ba4
20378 brk(0x8176000) = 0x8176000
20378 umask(0177) = 022
20378 rt_sigaction(SIGBUS, {0x80567e0, [BUS], SA_RESTORER|SA_RESTART,
0x8098e08}, {SIG_DFL}, 8) = 0
20378 rt_sigaction(SIGTERM, {0x80567e0, [TERM], SA_RESTORER|SA_RESTART,
0x8098e08}, {SIG_DFL}, 8) = 0
20378 rt_sigaction(SIGUSR1, {0x80567e0, [USR1], SA_RESTORER|SA_RESTART,
0x8098e08}, {SIG_DFL}, 8) = 0
20378 rt_sigaction(SIGUSR2, {0x80567e0, [USR2], SA_RESTORER|SA_RESTART,
0x8098e08}, {SIG_DFL}, 8) = 0
20378 rt_sigaction(SIGHUP, {0x80567e0, [HUP], SA_RESTORER|SA_RESTART,
0x8098e08}, {SIG_DFL}, 8) = 0
20378 uname({sys="Linux", node="cherokee", ...}) = 0
20378 time([1150236294]) = 1150236294
20378 access("/dev/null", R_OK) = 0
20378 open("/dev/null", O_RDONLY|O_LARGEFILE) = 3
20378 ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x5d867770) = -1 ENOTTY
(Inappropriate ioctl for device)
20378 fstat64(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 3), ...}) = 0
20378 ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x5d86768c) = -1 ENOTTY
(Inappropriate ioctl for device)
20378 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x22334000
20378 read(3, "", 4096) = 0
20378 ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x5d867790) = -1 ENOTTY
(Inappropriate ioctl for device)
20378 close(3) = 0
20378 munmap(0x22334000, 4096) = 0
20378 open("/", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 3
20378 fstat64(3, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
20378 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0
20378 open("/tmp/empty/aide.db", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such
file or directory)
20378 fstat64(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 5), ...}) = 0
20378 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x22334000
20378 write(1, "Couldn\'t open file /tmp/empty/ai"..., 50) = 50
20378 munmap(0x22334000, 4096) = 0
20378 exit_group(18) = ?
