Comment 5 for bug 1026852

Revision history for this message
Tyler Hicks (tyhicks) wrote : Re: [MIR] audit (pulls in libprelude and maybe libev)

Here's a debdiff which backports the upstream patches that disable the auditd network listener and splits up the auditd package into auditd-common, auditd, and auditd-light. I've tested the resulting packages and everything looks good except for these dpkg warnings when doing a dist-upgrade to the new auditd package:

...
Preparing to replace auditd 1.7.18-1ubuntu1 (using .../auditd_1.7.18-1ubuntu2_amd64.deb) ...
Unpacking replacement auditd ...
dpkg: warning: unable to delete old directory '/etc/audit': Directory not empty
dpkg: warning: unable to delete old directory '/etc/audisp/plugins.d': Directory not empty
dpkg: warning: unable to delete old directory '/etc/audisp': Directory not empty
dpkg: warning: unable to delete old directory '/var/log/audit': Directory not empty
...

Those directories were moved from the auditd package to the auditd-common package. This is the first time that I've done a package split, so I'm not sure how serious those warnings are or how to fix them.