Debian Bug report logs - #615111
aide: fails on large files

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Philippe Hebrais <philippe.hebrais@gmail.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: aide: fails on large files

Date: Fri, 25 Feb 2011 14:17:47 -0500

Package: aide
Version: 0.15.1-2
Severity: normal
Tags: d-i lfs


I have a few large backup files lying around (~5 Gigs each).  Aide reports
   Value too large for defined data type
in do_md().  I was able to exclude them and everything is fine... except
it would have been nice to protect them as well..

Looks like some component needs recompiling for large file support.

-- System Information:
Debian Release: 6.0
  APT prefers squeeze-updates
  APT policy: (500, 'squeeze-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages aide depends on:
ii  aide-common        0.15.1-2              Advanced Intrusion Detection Envir
ii  bsd-mailx          8.1.2-0.20100314cvs-1 simple mail user agent
ii  liblockfile1       1.08-4                NFS-safe locking library, includes
ii  ucf                3.0025+nmu1           Update Configuration File: preserv

Versions of packages aide recommends:
ii  cron                          3.0pl1-116 process scheduling daemon

aide suggests no packages.

-- no debconf information

Message #10 received at 615111@bugs.debian.org (full text, mbox, reply):

From: Marc Haber <mh+debian-packages@zugschlus.de>

To: Philippe Hebrais <philippe.hebrais@gmail.com>, 615111@bugs.debian.org, 615111-submitter@bugs.debian.org

Cc: Marc Haber <mh+debian-packages@zugschlus.de>

Subject: Re: Bug#615111: aide: fails on large files

Date: Sun, 27 Feb 2011 11:44:02 +0100

On Fri, Feb 25, 2011 at 02:17:47PM -0500, Philippe Hebrais wrote:
> I have a few large backup files lying around (~5 Gigs each).  Aide reports
>    Value too large for defined data type
> in do_md().  I was able to exclude them and everything is fine... except
> it would have been nice to protect them as well..
> 
> Looks like some component needs recompiling for large file support.

This works for me. That's what I did on a squeeze system with i686
architecture:

create test file with dd if=/dev/zero of=testfile bs=65536 count=40000
run aide
change test file by appending a few characters
run aide

Everything worked as expected.

Also, please explain the d-i tag.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190

Message #22 received at 615111@bugs.debian.org (full text, mbox, reply):

From: Philippe Hébrais <hebrais@auxmaillesgodefroy.com>

To: Marc Haber <mh+debian-packages@zugschlus.de>, 615111@bugs.debian.org

Subject: Fwd: Re: Bug#615111: aide: fails on large files

Date: Thu, 03 Mar 2011 15:51:01 -0500

Hi Marc,

[I sent this a few days ago, but I forgot to include the 
@bugs.debian.org recipient]

On 27/02/2011 5:44 AM, Marc Haber wrote:
>  This works for me. That's what I did on a squeeze system with i686
>  architecture:

I took some time to investigate this morning.  I used the following,
iteratively:
  dd if=/dev/random of=/testfile bs=65536 seek=39999 count=1
  aide.wrapper --update | mail root
  cp -f /var/lib/aide.db.new /var/lib/aide.db

Each time, aide complains:
  do_md(): open() for /testfile failed: Value too large for defined
data type

It's detailed report says:

File: /testfile
 Mtime    : 2011-02-27 07:29:34              , 2011-02-27 08:02:50
 Ctime    : 2011-02-27 07:29:34              , 2011-02-27 08:02:50

It apparently has no hashing data for comparison.

I then tried removing hash functions from "Checksums" in
/etc/aide/aide.conf.

sha256, when alone, still generates an error.
crc32, when alone, still generates an error.

If I set "Checksums = E", then all is fine.  I get no error.

To AIDE's credit, despite the error, it keeps checking the system and
even the other properties for this file.

>  Also, please explain the d-i tag.

I got confused.  Rereading its definition, I cannot fathom why I put it
there.

>  Greetings
>  Marc
Thanks.  Let me know how I can further help.

Message #27 received at 615111@bugs.debian.org (full text, mbox, reply):

From: Philippe Hébrais <hebrais@auxmaillesgodefroy.com>

To: 615111@bugs.debian.org

Subject: lsof

Date: Fri, 04 Mar 2011 20:34:39 -0500

I thought perhaps my problem could be related to a library used.  Here is
the "lsof -p <pid-of-running-aide>":

COMMAND  PID USER   FD   TYPE DEVICE SIZE/OFF    NODE NAME
aide    5362 root  txt    REG  253,0  1080016  524534 /usr/bin/aide
aide    5362 root  mem    REG  253,0    42572 1646898 
/lib/libnss_files-2.11.2.so
aide    5362 root  mem    REG  253,0    38504 1646907 
/lib/libnss_nis-2.11.2.so
aide    5362 root  mem    REG  253,0   113964 1646825 /lib/ld-2.11.2.so
aide    5362 root  mem    REG  253,0  1319176 1646838 /lib/libc-2.11.2.so
aide    5362 root  mem    REG  253,0    79676 1646895 /lib/libnsl-2.11.2.so
aide    5362 root  mem    REG  253,0    30496 1646896 
/lib/libnss_compat-2.11.2.so
aide    5362 root    0u   CHR  136,2      0t0       5 /dev/pts/2
aide    5362 root    1u   CHR  136,2      0t0       5 /dev/pts/2
aide    5362 root    2u   CHR  136,2      0t0       5 /dev/pts/2
aide    5362 root    3uW  REG  253,0   638976 1287299 
/var/lib/aide/aide.db.new
aide    5362 root    5r   REG  253,0 30012787 1286873 /var/lib/aide/aide.db

Message #32 received at 615111@bugs.debian.org (full text, mbox, reply):

From: Marc Haber <mh+debian-packages@zugschlus.de>

To: 615111@bugs.debian.org, 615111-submitter@bugs.debian.org

Cc: Marc Haber <mh+debian-packages@zugschlus.de>

Subject: Re: tagging 615111

Date: Sat, 5 Mar 2011 18:41:30 +0100

tags #615111 - unreproducible
thanks

I can reproduce this as long as the userland is 32bit. The error
message goes to stdout, so it was hidden away in my first test.

Submitter's reproduction method uses a sparse file which does not play
r a role, the issue is reproducible with a non-sparse all-zero file as
well.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835

Message #48 received at 615111-close@bugs.debian.org (full text, mbox, reply):

From: Hannes von Haugwitz <hannes@vonhaugwitz.com>

To: 615111-close@bugs.debian.org

Subject: Bug#615111: fixed in aide 0.15.1-3

Date: Fri, 11 Mar 2011 10:17:09 +0000

Source: aide
Source-Version: 0.15.1-3

We believe that the bug you reported is fixed in the latest version of
aide, which is due to be installed in the Debian FTP archive:

aide-common_0.15.1-3_all.deb
  to main/a/aide/aide-common_0.15.1-3_all.deb
aide-dynamic_0.15.1-3_amd64.deb
  to main/a/aide/aide-dynamic_0.15.1-3_amd64.deb
aide-xen_0.15.1-3_amd64.deb
  to main/a/aide/aide-xen_0.15.1-3_amd64.deb
aide_0.15.1-3.diff.gz
  to main/a/aide/aide_0.15.1-3.diff.gz
aide_0.15.1-3.dsc
  to main/a/aide/aide_0.15.1-3.dsc
aide_0.15.1-3_amd64.deb
  to main/a/aide/aide_0.15.1-3_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 615111@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Hannes von Haugwitz <hannes@vonhaugwitz.com> (supplier of updated aide package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 11 Mar 2011 09:50:46 +0100
Source: aide
Binary: aide aide-xen aide-dynamic aide-common aide-config-zg2
Architecture: source amd64 all
Version: 0.15.1-3
Distribution: unstable
Urgency: low
Maintainer: Aide Maintainers <pkg-aide-maintainers@lists.alioth.debian.org>
Changed-By: Hannes von Haugwitz <hannes@vonhaugwitz.com>
Description: 
 aide       - Advanced Intrusion Detection Environment - static binary
 aide-common - Advanced Intrusion Detection Environment - Common files
 aide-config-zg2 - Advanced Intrusion Detection Environment - Zg2 configuration exte
 aide-dynamic - Advanced Intrusion Detection Environment - dynamic binary
 aide-xen   - Advanced Intrusion Detection Environment - static binary for XEN
Closes: 612405 615111
Changes: 
 aide (0.15.1-3) unstable; urgency=low
 .
   [ Marc Haber ]
   * 31_aide_bind9:
     - fix wrong group (closes: #612405)
 .
   [ Hannes von Haugwitz ]
   * debian/patches/05-configure_32-bit_lfs_fix.dpatch: new
     - fixed lfs on 32-bit systems (closes: #615111)
Checksums-Sha1: 
 a63adf5b94e114018b90ed0769642ae5bd71f87a 1561 aide_0.15.1-3.dsc
 306369185439a584723c5c276ef5d0e2004d0e0b 75716 aide_0.15.1-3.diff.gz
 37ddd9853e2a3cde89a2ded625034e20529409f0 597018 aide_0.15.1-3_amd64.deb
 ca7f4d89b91a7fd599dfccb78ae104f1caf9ec5a 106782 aide-common_0.15.1-3_all.deb
 392259168f51fba627e5d63a86cce8002aae93f9 597040 aide-xen_0.15.1-3_amd64.deb
 41a83248981e9b6d4f6f0ff6b44928c30225856c 121388 aide-dynamic_0.15.1-3_amd64.deb
Checksums-Sha256: 
 ece1015e8d1b9f0e226626b17b8e23759898d70961a48c70dfa708c4ec5cdca9 1561 aide_0.15.1-3.dsc
 960bd062cba8610f8e2aac89e9696fe044b254fabd866044ba4e13a9e8efc33c 75716 aide_0.15.1-3.diff.gz
 9b2f635d0431eb896a6628cb56b1a1c1ec3b20bc3601643fa704974907c93fdc 597018 aide_0.15.1-3_amd64.deb
 528016e7e3a31246a99a7c25a07dde19c6eb1af799714c37d69b92c562e11c6c 106782 aide-common_0.15.1-3_all.deb
 d623fe67cafd10c7df1236153d0550efe0f1bf2528b3675b6f09479bc9cd180d 597040 aide-xen_0.15.1-3_amd64.deb
 7dcf8b5effdc630f7454f33808b9cfe60b1491a6389268d7c081eee19248c2f5 121388 aide-dynamic_0.15.1-3_amd64.deb
Files: 
 f7bf5099320c524441f08a7bee3340da 1561 admin optional aide_0.15.1-3.dsc
 daa50cc87ca9293cd5185f587554c002 75716 admin optional aide_0.15.1-3.diff.gz
 f3742a0c1c1c62cecbe401c4dace4a7f 597018 admin optional aide_0.15.1-3_amd64.deb
 3385809a78b39d3ad5c0a725522d76d2 106782 admin optional aide-common_0.15.1-3_all.deb
 1a858be534282e5243e8313248a31950 597040 admin extra aide-xen_0.15.1-3_amd64.deb
 f6014c0a006a51df13a2248f43778ce9 121388 admin extra aide-dynamic_0.15.1-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk156qIACgkQiz0NKp2eEfWY4gCfXFoKzyJ2WHKwk197VzWFiuNR
XgoAoIQE/fVnWyZ0f+KprYyAmVEzQtF3
=JNXV
-----END PGP SIGNATURE-----

Message #55 received at 615111@bugs.debian.org (full text, mbox, reply):

From: Hannes von Haugwitz <hannes@vonhaugwitz.com>

To: debian-release@lists.debian.org

Cc: 612405@bugs.debian.org, 615111@bugs.debian.org

Subject: [SRM] Approval for aide 0.15.1-3

Date: Sun, 27 Mar 2011 10:25:31 +0200

[Message part 1 (text/plain, inline)]

Hi,

I'd like to fix two important bugs (#612405, #615111) in aide. Both bugs
introduced problems which doesn't exist in oldstable.

I've attached the diff for 0.15.1-3 (in unstable).

aide 0.15.1-3 has reached testing some days ago without any problems.

Please consider aide 0.15.1-3 in stable.

Thanks

Hannes

[aide_diff_0.15.1-2_0.15.1-3.patch (text/x-diff, attachment)]

Message #60 received at 615111@bugs.debian.org (full text, mbox, reply):

From: "Adam D. Barratt" <adam@adam-barratt.org.uk>

To: Hannes von Haugwitz <hannes@vonhaugwitz.com>

Cc: debian-release@lists.debian.org, 612405@bugs.debian.org, 615111@bugs.debian.org

Subject: Re: [SRM] Approval for aide 0.15.1-3

Date: Tue, 05 Apr 2011 21:41:25 +0100

On Sun, 2011-03-27 at 10:25 +0200, Hannes von Haugwitz wrote:
> I'd like to fix two important bugs (#612405, #615111) in aide. Both bugs
> introduced problems which doesn't exist in oldstable.
> 
> I've attached the diff for 0.15.1-3 (in unstable).

Thanks.  Have the patches been tested on stable?

One other question - why is aide defining both _LARGEFILE64_SOURCE and
_FILE_OFFSET_BITS=64 ?  The code doesn't actually seem to use the *64
functions, so the former seems somewhat redundant.

> aide 0.15.1-3 has reached testing some days ago without any problems.
> 
> Please consider aide 0.15.1-3 in stable.

0.15.1-3 itself won't enter stable, but a 0.15.1-2+squeeze1 might.

Regards,

Adam

Message #65 received at 615111@bugs.debian.org (full text, mbox, reply):

From: Hannes von Haugwitz <hannes@vonhaugwitz.com>

To: "Adam D. Barratt" <adam@adam-barratt.org.uk>

Cc: debian-release@lists.debian.org, 612405@bugs.debian.org, 615111@bugs.debian.org

Subject: Re: [SRM] Approval for aide 0.15.1-3

Date: Mon, 11 Apr 2011 20:53:54 +0200

On Tue, Apr 05, 2011 at 09:41:25PM +0100, Adam D. Barratt wrote:
> On Sun, 2011-03-27 at 10:25 +0200, Hannes von Haugwitz wrote:
> > I'd like to fix two important bugs (#612405, #615111) in aide. Both bugs
> > introduced problems which doesn't exist in oldstable.
> > 
> > I've attached the diff for 0.15.1-3 (in unstable).
> 
> Thanks.  Have the patches been tested on stable?

Yes. 0.15.1-2+squeeze1 has been tested on 32-bit debian stable.

> One other question - why is aide defining both _LARGEFILE64_SOURCE and
> _FILE_OFFSET_BITS=64 ?  The code doesn't actually seem to use the *64
> functions, so the former seems somewhat redundant.

It seems as if _LARGEFILE64_SOURCE has been originally added as part of a
fix for compilation under Solaris[0].

> > aide 0.15.1-3 has reached testing some days ago without any problems.
> > 
> > Please consider aide 0.15.1-3 in stable.
> 
> 0.15.1-3 itself won't enter stable, but a 0.15.1-2+squeeze1 might.

The diff for 0.15.1-2+squeeze1 is available on git.debian.org[1].

Please let me know if I can upload.

Thanks

Hannes

[0] http://aide.git.sourceforge.net/git/gitweb.cgi?p=aide/aide;a=commitdiff;h=12de742
[1] http://git.debian.org/?p=pkg-aide/aide.git;a=commitdiff;h=f674bb4;hp=debian/0.15.1-2

Message #70 received at 615111@bugs.debian.org (full text, mbox, reply):

From: "Adam D. Barratt" <adam@adam-barratt.org.uk>

To: Hannes von Haugwitz <hannes@vonhaugwitz.com>

Cc: debian-release@lists.debian.org, 612405@bugs.debian.org, 615111@bugs.debian.org

Subject: Re: [SRM] Approval for aide 0.15.1-3

Date: Tue, 19 Apr 2011 20:46:14 +0100

On Mon, 2011-04-11 at 20:53 +0200, Hannes von Haugwitz wrote:
> On Tue, Apr 05, 2011 at 09:41:25PM +0100, Adam D. Barratt wrote:
> > On Sun, 2011-03-27 at 10:25 +0200, Hannes von Haugwitz wrote:
> > > I'd like to fix two important bugs (#612405, #615111) in aide. Both bugs
> > > introduced problems which doesn't exist in oldstable.
> > > 
> > > I've attached the diff for 0.15.1-3 (in unstable).
> > 
> > Thanks.  Have the patches been tested on stable?
> 
> Yes. 0.15.1-2+squeeze1 has been tested on 32-bit debian stable.
[...]
> The diff for 0.15.1-2+squeeze1 is available on git.debian.org[1].
> 
> Please let me know if I can upload.

Please go ahead; thanks.

> [1] http://git.debian.org/?p=pkg-aide/aide.git;a=commitdiff;h=f674bb4;hp=debian/0.15.1-2

Regards,

Adam

Message #75 received at 615111-close@bugs.debian.org (full text, mbox, reply):

From: Hannes von Haugwitz <hannes@vonhaugwitz.com>

To: 615111-close@bugs.debian.org

Subject: Bug#615111: fixed in aide 0.15.1-2+squeeze1

Date: Wed, 20 Apr 2011 21:02:08 +0000

Source: aide
Source-Version: 0.15.1-2+squeeze1

We believe that the bug you reported is fixed in the latest version of
aide, which is due to be installed in the Debian FTP archive:

aide-common_0.15.1-2+squeeze1_all.deb
  to main/a/aide/aide-common_0.15.1-2+squeeze1_all.deb
aide-dynamic_0.15.1-2+squeeze1_i386.deb
  to main/a/aide/aide-dynamic_0.15.1-2+squeeze1_i386.deb
aide-xen_0.15.1-2+squeeze1_i386.deb
  to main/a/aide/aide-xen_0.15.1-2+squeeze1_i386.deb
aide_0.15.1-2+squeeze1.diff.gz
  to main/a/aide/aide_0.15.1-2+squeeze1.diff.gz
aide_0.15.1-2+squeeze1.dsc
  to main/a/aide/aide_0.15.1-2+squeeze1.dsc
aide_0.15.1-2+squeeze1_i386.deb
  to main/a/aide/aide_0.15.1-2+squeeze1_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 615111@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Hannes von Haugwitz <hannes@vonhaugwitz.com> (supplier of updated aide package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 11 Apr 2011 15:19:53 +0200
Source: aide
Binary: aide aide-xen aide-dynamic aide-common aide-config-zg2
Architecture: source i386 all
Version: 0.15.1-2+squeeze1
Distribution: stable
Urgency: low
Maintainer: Aide Maintainers <pkg-aide-maintainers@lists.alioth.debian.org>
Changed-By: Hannes von Haugwitz <hannes@vonhaugwitz.com>
Description: 
 aide       - Advanced Intrusion Detection Environment - static binary
 aide-common - Advanced Intrusion Detection Environment - Common files
 aide-config-zg2 - Advanced Intrusion Detection Environment - Zg2 configuration exte
 aide-dynamic - Advanced Intrusion Detection Environment - dynamic binary
 aide-xen   - Advanced Intrusion Detection Environment - static binary for XEN
Closes: 612405 615111
Changes: 
 aide (0.15.1-2+squeeze1) stable; urgency=low
 .
   [ Marc Haber ]
   * 31_aide_bind9:
     - fix wrong group (closes: #612405)
 .
   [ Hannes von Haugwitz ]
   * debian/patches/05-configure_32-bit_lfs_fix.dpatch: new
     - fixed lfs on 32-bit systems (closes: #615111)
Checksums-Sha1: 
 ae4f32076ff17831a5cdf252ede7dddd97d49495 1597 aide_0.15.1-2+squeeze1.dsc
 04b8bbfcd1f250635588ead155ad0751dc3a7187 77236 aide_0.15.1-2+squeeze1.diff.gz
 ba923c023f0519114f4dee8fe76ec8a93cab6af7 562626 aide_0.15.1-2+squeeze1_i386.deb
 794a127d683f9135a5eb8ec3e99f9f0a4d9d6634 105786 aide-common_0.15.1-2+squeeze1_all.deb
 37347243e0bf5c155a83dbc77b9300bb66eb0778 566738 aide-xen_0.15.1-2+squeeze1_i386.deb
 825d2e396c2ac6d0b044d0468f1e7cf827514731 116220 aide-dynamic_0.15.1-2+squeeze1_i386.deb
Checksums-Sha256: 
 c35feefd82a4f39a8c48149f58de6a344b202b8317d04eddefb9b680347ce251 1597 aide_0.15.1-2+squeeze1.dsc
 d64cd0d83006c817337dad3e71075b072b814206c21ae340cea16507cb160d5e 77236 aide_0.15.1-2+squeeze1.diff.gz
 76e596d44204d466b04f9f45fd4e0a5046b6212242a2d1ed3bfa997faec6add3 562626 aide_0.15.1-2+squeeze1_i386.deb
 6c3ccf09c77609f5b9af7c5c1bbebb4276042c5bc82e5da364ffc70761806f93 105786 aide-common_0.15.1-2+squeeze1_all.deb
 a65bc9e9eef8e779c8a0c29c65a17552ae0d531a7645b574480473a123535778 566738 aide-xen_0.15.1-2+squeeze1_i386.deb
 2bb2bc0ed45d42f4dac999e22b0aba6371a3fb7eb5289d7f411d9b557422f444 116220 aide-dynamic_0.15.1-2+squeeze1_i386.deb
Files: 
 14cc2bbda254f1bf37f05d74074bd2b6 1597 admin optional aide_0.15.1-2+squeeze1.dsc
 85b113e515d6a25f5eb994507eabfdeb 77236 admin optional aide_0.15.1-2+squeeze1.diff.gz
 7f50aa1107eb50e81f774c544910030c 562626 admin optional aide_0.15.1-2+squeeze1_i386.deb
 7208ed39b8eccf64d3affd72ed43f5b1 105786 admin optional aide-common_0.15.1-2+squeeze1_all.deb
 c9826a4a558a234b8c8776a969efd8ec 566738 admin extra aide-xen_0.15.1-2+squeeze1_i386.deb
 facad2abda1c955da334c36e0e076de0 116220 admin extra aide-dynamic_0.15.1-2+squeeze1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk2jNNUACgkQiz0NKp2eEfWM5QCfdmNb7/RQ3Ik6PAeZ6kanflS9
T0oAoK4Dzii+0aGhIPC/Xvrvre2doGnf
=i3pN
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.