Debian Bug report logs - #469508
aide-common: No rules for the checksecurity package

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Francois Gouget <fgouget@free.fr>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: aide-common: No rules for the checksecurity package

Date: Wed, 05 Mar 2008 16:58:09 +0100

Package: aide-common
Version: 0.13.1-8
Severity: normal
Tags: patch


aide issues warnings about the /var/log/setuid/setuid.changes* files.
These are standard rotated logs generated by the check-setuid tool of
the checksecurity package.

I propose to put the following rules in the 31_aide_checksecurity
file:

---
/var/log/setuid/setuid.changes\.1$ RotatedLogs+ANF
/var/log/setuid/setuid.changes\.[23456789]$ RotatedLogs
/var/log/setuid/setuid.changes\.10$ RotatedLogs+ARF
/var/log/setuid/setuid.changes$ Logs
/var/log/setuid/setuid.(today|yesterday)$ VarFile
/var/log/setuid$ VarDir
---

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22.9fg2 (PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages aide-common depends on:
ii  aide [aide-binary] 0.13.1-8              Advanced Intrusion Detection Envir
ii  bsd-mailx [mailx]  8.1.2-0.20071201cvs-2 A simple mail user agent
ii  debconf [debconf-2 1.5.19                Debian configuration management sy
ii  liblockfile1       1.06.2                NFS-safe locking library, includes
ii  mailx              1:20071201-2          Transitional package for mailx ren
ii  ucf                3.004                 Update Configuration File: preserv

Versions of packages aide-common recommends:
ii  cron                          3.0pl1-103 management of regular background p

-- debconf information excluded

Message #10 received at 469508@bugs.debian.org (full text, mbox, reply):

From: Marc Haber <mh+debian-packages@zugschlus.de>

To: Francois Gouget <fgouget@free.fr>, 469508@bugs.debian.org, 469508-submitter@bugs.debian.org

Cc: Marc Haber <mh+debian-packages@zugschlus.de>

Subject: Re: Bug#469508: aide-common: No rules for the checksecurity package

Date: Thu, 6 Mar 2008 18:58:21 +0100

tags #469508 confirmed pending
thanks

On Wed, Mar 05, 2008 at 04:58:09PM +0100, Francois Gouget wrote:
> I propose to put the following rules in the 31_aide_checksecurity
> file:
> 
> ---
> /var/log/setuid/setuid.changes\.1$ RotatedLogs+ANF
> /var/log/setuid/setuid.changes\.[23456789]$ RotatedLogs
> /var/log/setuid/setuid.changes\.10$ RotatedLogs+ARF
> /var/log/setuid/setuid.changes$ Logs
> /var/log/setuid/setuid.(today|yesterday)$ VarFile
> /var/log/setuid$ VarDir
> ---

I have committed the proposed change to svn, thanks.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835

Message #20 received at 469508-close@bugs.debian.org (full text, mbox, reply):

From: Marc Haber <mh+debian-packages@zugschlus.de>

To: 469508-close@bugs.debian.org

Subject: Bug#469508: fixed in aide 0.13.1-10

Date: Sun, 13 Apr 2008 08:47:07 +0000

Source: aide
Source-Version: 0.13.1-10

We believe that the bug you reported is fixed in the latest version of
aide, which is due to be installed in the Debian FTP archive:

aide-common_0.13.1-10_all.deb
  to pool/main/a/aide/aide-common_0.13.1-10_all.deb
aide-dynamic_0.13.1-10_i386.deb
  to pool/main/a/aide/aide-dynamic_0.13.1-10_i386.deb
aide-xen_0.13.1-10_i386.deb
  to pool/main/a/aide/aide-xen_0.13.1-10_i386.deb
aide_0.13.1-10.diff.gz
  to pool/main/a/aide/aide_0.13.1-10.diff.gz
aide_0.13.1-10.dsc
  to pool/main/a/aide/aide_0.13.1-10.dsc
aide_0.13.1-10_i386.deb
  to pool/main/a/aide/aide_0.13.1-10_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 469508@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Marc Haber <mh+debian-packages@zugschlus.de> (supplier of updated aide package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sun, 13 Apr 2008 09:27:49 +0200
Source: aide
Binary: aide aide-xen aide-dynamic aide-common aide-config-zg2
Architecture: source i386 all
Version: 0.13.1-10
Distribution: unstable
Urgency: low
Maintainer: Aide Maintainers <pkg-aide-maintainers@lists.alioth.debian.org>
Changed-By: Marc Haber <mh+debian-packages@zugschlus.de>
Description: 
 aide       - Advanced Intrusion Detection Environment - static binary
 aide-common - Advanced Intrusion Detection Environment - Common files
 aide-config-zg2 - Advanced Intrusion Detection Environment - Zg2 configuration exte
 aide-dynamic - Advanced Intrusion Detection Environment - dynamic binary
 aide-xen   - Advanced Intrusion Detection Environment - static binary for XEN
Closes: 469503 469508 469509 469511 472905
Changes: 
 aide (0.13.1-10) unstable; urgency=low
 .
   * debian/control: fix deprecated "<" in Conflicts
   * Add explanation "b: block count" to aide.conf.5.
     Thanks to Francois Gouget. Closes: #469503
   * 31_aide_syslog: modify regexp to match kern.log as well.
     Thanks to Francois Gouget. This partly addresses #469507
   * 31_aide_checksecurity: add file with rules from
     Francois Gouget, thanks. Closes: #469508
   * example rules for debian-multimedia packages from Francois Gouget.
     * mythweb. Closes: #469511
     * mythbackend. Closes: #469509
   * Move README.Debian to aide-common
   * README.Debian: add missing space, remove vote request (no votes
     received, ever)
   * /etc/default/aide: Add hint how to obtain a variable subject
   * update-aide.conf now adds @@{ROOTPREFIX} to all lines, making
     audit of chroots and vservers with identical rules easier without
     uglifying the actual rules. Thanks to Russell Gadd.
   * more fixes to aide_fixperms, thanks to Tom Geissler.
   * introduce YEAR4D variable, make use of it
   * remove bashism from debian/rules.
     Thanks to Raphael Geissert. Closes: #472905
   * README.Debian changes, thanks to Russell Gadd:
     * clarify the role of debconf in README.Debian
     * move the wrapper paragraph lower
     * Add a little more prose about Debian's configuration scheme
   * 31_aide_apt: allow tildes in archive names
   * enable gzip_dbout again
   * Collect modified rules from Marc's productive systems:
     * re-work log mechanics, add lots of documentation
     * 31_aide_aide: Log rotation hopefully fixed
     * 31_aide_amanda-server: Take verified rule from productive system
     * 31_aide_amanda-client: Parse data from amanda config
     * 31_aide_apt: Add Release and IndexDiff for deb-src lines, remove
         sarge support including APT_VERS code. Add new var and log rules.
     * 31_aide_aptitude: add rule for /var/lock/aptitude, and config
         files in /root
     * 31_aide_bind9: BINDCHROOT is now the path to the chroot
     * 31_aide_clamav: fix log rotation rules
     * 31_aide_dokuwiki: new
     * 31_aide_exim4: remove /root/.rnd, add /var/spool/exim4/.rnd
         and -J spool files. exim4 >= 4.69-3 will place the .rnd file
         in /var/spool/exim4
     * 31_aide_exim4_logs: introduce macros, explain how to include
         paniclog
     * 31_aide_mailman: new
     * 31_aide_man: adapt to new directory structure
     * 31_aide_munin: rule for munin server socket
     * 31_aide_mlocate: new
     * 31_aide_nagios2: adapt to current packaging
     * 31_aide_php4: no-op file
     * 31_aide_privoxy: new
     * 31_aide_smokeping: new
     * 31_aide_spamassassin: add rule (default disabled) for rule updates
     * 31_aide_syslog: logs are rotated with seven cycles
     * 31_aide_torrus: adapt to current packages
   * R.I.P. linda
Checksums-Sha1: 
 bd0a9974d7627ba8008c0dc0435e617e16a930fb 1235 aide_0.13.1-10.dsc
 390a13fb18382692242526e478f327577352b411 60233 aide_0.13.1-10.diff.gz
 39030f81e0ffe361c9505ea82048d4731b245cca 518530 aide_0.13.1-10_i386.deb
 162f9aaf2e3088cb59d155b12706a9c83475c0f5 83430 aide-common_0.13.1-10_all.deb
 8c26557649659af2ef0a31e638dbc43af33db40b 549554 aide-xen_0.13.1-10_i386.deb
 980c9b618f53761fb21704efe6c07f0c155e7bad 99208 aide-dynamic_0.13.1-10_i386.deb
Checksums-Sha256: 
 f141f755da07685204534353bf24b4174389551a44ce5f21ab96987a21e21038 1235 aide_0.13.1-10.dsc
 77e94acba05aebc6ac2996cf78370b94affefb6caf3eda4fb14b08bc33435c03 60233 aide_0.13.1-10.diff.gz
 3b4db8f09ea44b166e26889078c34e8f90e09d28552eda2a3ae2bcc4af0b9c88 518530 aide_0.13.1-10_i386.deb
 86e7e717aef6da8975af36ac440aed1492817b42de2fcf18c8c7e61ad8e35180 83430 aide-common_0.13.1-10_all.deb
 1bbf819728960589f5040c8ea30bbd225cb3acc3f562b572517e54b10908b4cc 549554 aide-xen_0.13.1-10_i386.deb
 5d932c9d661227636e48e07140b300e5837d87de2f242f27d816012789b04b45 99208 aide-dynamic_0.13.1-10_i386.deb
Files: 
 fc36181b1e6f9b5951e5c7a2eaa6f0bc 1235 admin optional aide_0.13.1-10.dsc
 ef0b9b7d6430b1dcf5fdc6c56211b44b 60233 admin optional aide_0.13.1-10.diff.gz
 8bbb62dce05e73a42fcb3480b6b4feb5 518530 admin optional aide_0.13.1-10_i386.deb
 4bb527a7e908fbe355f1b1c75856f1d1 83430 admin optional aide-common_0.13.1-10_all.deb
 7e0501acb53c987d3d19d03124afe496 549554 admin optional aide-xen_0.13.1-10_i386.deb
 b4508f94f8be613b3a0c6ba9b627da3f 99208 admin optional aide-dynamic_0.13.1-10_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIAbzRgZalRGu6PIQRAs3SAKCdvG7RIFd8KlmVwxXQRkon0VbSwgCeIm8m
aceVW2LvpAOuDJe3iPVhfLU=
=5rdl
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.