On Fri, 2010-05-21 at 22:55 +0200, Hannes von Haugwitz wrote: > tags 582129 +moreinfo > thanks > > naths wrote: > > Package: aide > > Version: 0.14-1 > > Severity: normal > > > > In daily AIDE automated report generated for my system to root mail shows > > exit > > code of 134 as shown below > > > > "Errors produced (1 lines): > > Aborted > > > > End of AIDE error output. > > > > Output of the daily AIDE run (1 lines): > > Error reading gzipped file: <fd:6>: buffer error > > > > End of AIDE output." > > > > The same output while running on as cmd > > #aide -c /etc/aide/aide.conf > > Error reading gzipped file: <fd:4>: buffer error > > Aborted > > # > > > > I tried to reproduce this problem with no success. > > Please provide more information about how to reproduce this behavior, if > it's still reproducible by you. How often and since when are you seeing > this problem? Did you changed something? Have you adjusted your aide.conf? > > Additionally please post the output of 'ls -l /var/lib/aide/' and 'gzip > -t /var/lib/aide/aide.db'. > > Thanks > > Hannes
I have not change anything after installation in aide.conf file but use "update-aide.conf." and then use "#aide -c /etc/aide/aide.conf -i". as you required, 'ls -l /var/lib/aide/' -rw------- 1 root root 86081 May 25 19:48 aide.conf.autogenerated -rw------- 1 root root 10 May 16 20:28 aide.db -rw------- 1 root root 10 May 23 20:21 aide.db.new # gzip -t /var/lib/aide/aide.db gzip: /var/lib/aide/aide.db: unexpected end of file output of mail today This is an automated report generated by the Advanced Intrusion Detection Environment on *.com started at 2010-05-25 20:38:12. ****************************************************************************** *IDE returned with exit code 134. AIDE returned an unknown non-zero exit val* * exit value is 134 * ****************************************************************************** Errors produced (1 lines): Aborted End of AIDE error output. Output of the daily AIDE run (1 lines): Error reading gzipped file: <fd:5>: buffer error End of AIDE output. The check was done against /var/lib/aide/aide.db with the following characteristics: Size : 10 Bcount : 8 Mtime : 2010-05-16 20:28:28 Ctime : 2010-05-16 20:28:28 Inode : 21480 RMD160 : Fju2Ctv0HGnzSQvsOqpVjdmb5CE= TIGER : 5IrGLu3GcSFIhZE6KmxMjyQAyEBrGizm SHA256 : uMCA0xJ29BVlmAPvnXJ1GtufJCBgDywi SHA512 : SAQj4+E+Ni4UKgZ7SQN1lrCZWJcVfpkz CRC32 : L9Oy/w== HAVAL : yB6IHUOBYyixk8xtruVqtsZEnxKs+UUP GOST : bGuZmDjo5PkMZYDtXAd9TGSRBXZj95Nh The AIDE run created a new database /var/lib/aide/aide.db.new with the following characteristics: Size : 10 Bcount : 8 Inode : 21403 RMD160 : Fju2Ctv0HGnzSQvsOqpVjdmb5CE= TIGER : 5IrGLu3GcSFIhZE6KmxMjyQAyEBrGizm SHA256 : uMCA0xJ29BVlmAPvnXJ1GtufJCBgDywi SHA512 : SAQj4+E+Ni4UKgZ7SQN1lrCZWJcVfpkz CRC32 : L9Oy/w== HAVAL : yB6IHUOBYyixk8xtruVqtsZEnxKs+UUP GOST : bGuZmDjo5PkMZYDtXAd9TGSRBXZj95Nh End of AIDE daily cron job at 2010-05-25 20:38, run time 2 seconds Probably i have used wrong sequence of cmd. Thanks -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
