Public bug reported: Lines 51 and 52 in Stig.rules (found in /usr/share/doc/auditd/examples/stig.rules.gz) have minor errors which cause auditd to fail to launch when using the stig rules. This is caused by an extra 'm' in setdomainname.
Lines 51 and 52, as provided are the following: -a exit,always -F arch=b32 -S sethostname -S setdommainname -k system-locale -a exit,always -F arch=b64 -S sethostname -S setdommainname -k system-locale Lines 51 and 52 should be: -a exit,always -F arch=b32 -S sethostname -S setdomainname -k system-locale -a exit,always -F arch=b64 -S sethostname -S setdomainname -k system-locale Also, line 56 should be commented out (or fixed) as it refers to redhat configurations. Line 56 as provided: -w /etc/sysconfig/network -p wa -k system-locale ** Affects: audit (Ubuntu) Importance: Medium Status: Triaged ** Changed in: audit (Ubuntu) Status: New => Triaged ** Changed in: audit (Ubuntu) Importance: Undecided => Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/849743 Title: Auditd stig.rules typo errors in lines 51 and 52 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/audit/+bug/849743/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs