-
Notifications
You must be signed in to change notification settings - Fork 764
Open
Description
Description of problem:
Debian 13 and maybe other linux distro can have issue with AIDE configuration when package is version >= 0.19
playbook ansible cannot work when build and test AIDE Database beause of removed config option database
SCAP Security Guide Version:
0.1.79
Operating System Version:
Debian 13.2
Steps to Reproduce:
- Download tar / Zip version 0.1.79
- Use ansible playbook : debian13-playbook-anssi_bp28_intermediary.yml
- Wait for the failed
Actual Results:
Expected Results:
Ok
Additional Information/Debugging Steps:
After look man page, AIDE version >= 0.19 , config option database is removed : Man
If we try do init manualy with
/usr/sbin/aideinit -y -fWe get the same an error (with error on log because log didnt have _aide user on it
~# /usr/sbin/aideinit -y -f
Running aide --init...
/bin/bash: ligne 1: /var/log/aide/aideinit.log: Permission non accordée
AIDE --init return code 1If we modify log right and look it when try to build :
~# chown -R _aide:adm /var/log/aide
~# cat /var/log/aide/aideinit.errors
ERROR: /etc/aide/aide.conf:113: unexpected character: ':' (line: 'database=file:/var/lib/aide/aide.db')
AIDE --init return code 17And now if we delete database=file:/var/lib/aide/aide.db on last line /etc/aide/aide.conf and rebuild, all is OK.
Metadata
Metadata
Assignees
Labels
No labels