Systemd session rule doesn't match session numbers
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
aide (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
Aide configuration contains /etc/aide/
/@@{RUN}
!/@@{RUN}
!/@@{RUN}
!/@@{RUN}
However after running an aide check I had this change reported:
-------
Removed entries:
-------
f----------------: /run/systemd/
p----------------: /run/systemd/
The second line in this file is probably intendended to handle this (or perhaps did at some previous time when systemd sessions only had one digit), but systemd sessions have multiple digits. The regex needs adjusting to account for this, ie
!/@@{RUN}
Ubuntu 20.04.2 LTS arm64
ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: aide 0.16.1-1build2
ProcVersionSign
Uname: Linux 5.4.0-1045-aws aarch64
ApportVersion: 2.20.11-
Architecture: arm64
CasperMD5CheckR
Date: Thu May 13 15:27:46 2021
Ec2AMI: ami-0a295a26c82
Ec2AMIManifest: (unknown)
Ec2Availability
Ec2InstanceType: t4g.nano
Ec2Kernel: unavailable
Ec2Ramdisk: unavailable
ProcEnviron:
SHELL=/bin/bash
LANG=C.UTF-8
TERM=xterm-
PATH=(custom, no user)
SourcePackage: aide
UpgradeStatus: No upgrade log present (probably fresh install)