Systemd session rule doesn't match session numbers

Bug #1928350 reported by Ian Gibbs
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
aide (Ubuntu)
New
Undecided
Unassigned

Bug Description

Aide configuration contains /etc/aide/aide.conf.d/31_aide_systems_sessions which came from the package:

/@@{RUN}/systemd/(sessions|transient|users)$ VarDir
!/@@{RUN}/systemd/sessions/[0-9](\.ref)?$
!/@@{RUN}/systemd/transient/session-[0-9]+\.scope$
!/@@{RUN}/systemd/users/[0-9]+$

However after running an aide check I had this change reported:

---------------------------------------------------
Removed entries:
---------------------------------------------------

f----------------: /run/systemd/sessions/10835
p----------------: /run/systemd/sessions/10835.ref

The second line in this file is probably intendended to handle this (or perhaps did at some previous time when systemd sessions only had one digit), but systemd sessions have multiple digits. The regex needs adjusting to account for this, ie

!/@@{RUN}/systemd/sessions/[0-9]+(\.ref)?$

Ubuntu 20.04.2 LTS arm64

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: aide 0.16.1-1build2
ProcVersionSignature: Ubuntu 5.4.0-1045.47-aws 5.4.101
Uname: Linux 5.4.0-1045-aws aarch64
ApportVersion: 2.20.11-0ubuntu27.16
Architecture: arm64
CasperMD5CheckResult: skip
Date: Thu May 13 15:27:46 2021
Ec2AMI: ami-0a295a26c824fbb50
Ec2AMIManifest: (unknown)
Ec2AvailabilityZone: eu-west-2a
Ec2InstanceType: t4g.nano
Ec2Kernel: unavailable
Ec2Ramdisk: unavailable
ProcEnviron:
 SHELL=/bin/bash
 LANG=C.UTF-8
 TERM=xterm-256color
 PATH=(custom, no user)
SourcePackage: aide
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Ian Gibbs (realflash-uk) wrote :
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.