Skip to content

AIDE 0.19 Issue in ansible playbook debian 13 #14249

@Parnoud

Description

@Parnoud

Description of problem:

Debian 13 and maybe other linux distro can have issue with AIDE configuration when package is version >= 0.19
playbook ansible cannot work when build and test AIDE Database beause of removed config option database

SCAP Security Guide Version:

0.1.79

Operating System Version:

Debian 13.2

Steps to Reproduce:

  1. Download tar / Zip version 0.1.79
  2. Use ansible playbook : debian13-playbook-anssi_bp28_intermediary.yml
  3. Wait for the failed

Actual Results:

Image

Expected Results:

Ok

Additional Information/Debugging Steps:

After look man page, AIDE version >= 0.19 , config option database is removed : Man

If we try do init manualy with

/usr/sbin/aideinit -y -f

We get the same an error (with error on log because log didnt have _aide user on it

~# /usr/sbin/aideinit -y -f
Running aide --init...
/bin/bash: ligne 1: /var/log/aide/aideinit.log: Permission non accordée
AIDE --init return code 1

If we modify log right and look it when try to build :

~# chown -R _aide:adm /var/log/aide
~# cat /var/log/aide/aideinit.errors
  ERROR: /etc/aide/aide.conf:113: unexpected character: ':' (line: 'database=file:/var/lib/aide/aide.db')
AIDE --init return code 17

And now if we delete database=file:/var/lib/aide/aide.db on last line /etc/aide/aide.conf and rebuild, all is OK.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions