Public bug reported:
Aide configuration contains
/etc/aide/aide.conf.d/31_aide_systems_sessions which came from the
package:
/@@{RUN}/systemd/(sessions|transient|users)$ VarDir
!/@@{RUN}/systemd/sessions/[0-9](\.ref)?$
!/@@{RUN}/systemd/transient/session-[0-9]+\.scope$
!/@@{RUN}/systemd/users/[0-9]+$
However after running an aide check I had this change reported:
---------------------------------------------------
Removed entries:
---------------------------------------------------
f----------------: /run/systemd/sessions/10835
p----------------: /run/systemd/sessions/10835.ref
The second line in this file is probably intendended to handle this (or
perhaps did at some previous time when systemd sessions only had one
digit), but systemd sessions have multiple digits. The regex needs
adjusting to account for this, ie
!/@@{RUN}/systemd/sessions/[0-9]+(\.ref)?$
Ubuntu 20.04.2 LTS arm64
ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: aide 0.16.1-1build2
ProcVersionSignature: Ubuntu 5.4.0-1045.47-aws 5.4.101
Uname: Linux 5.4.0-1045-aws aarch64
ApportVersion: 2.20.11-0ubuntu27.16
Architecture: arm64
CasperMD5CheckResult: skip
Date: Thu May 13 15:27:46 2021
Ec2AMI: ami-0a295a26c824fbb50
Ec2AMIManifest: (unknown)
Ec2AvailabilityZone: eu-west-2a
Ec2InstanceType: t4g.nano
Ec2Kernel: unavailable
Ec2Ramdisk: unavailable
ProcEnviron:
SHELL=/bin/bash
LANG=C.UTF-8
TERM=xterm-256color
PATH=(custom, no user)
SourcePackage: aide
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: aide (Ubuntu)
Importance: Undecided
Status: New
** Tags: apport-bug arm64 ec2-images focal
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1928350
Title:
Systemd session rule doesn't match session numbers
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/aide/+bug/1928350/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
