| Summary: | app-forensics/aide-0.14.2 - aide fails if non-standard paths are used | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | dio |
| Component: | Current packages | Assignee: | Forensics Herd [disbanded] <forensics+obsolete> |
| Status: | RESOLVED NEEDINFO | ||
| Severity: | normal | CC: | itumaykin+gentoo, proxy-maint |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Attachments: | emerge --info | ||
Assuming =app-forensics/aide-0.14.2 based on your `emerge --info' output. (In reply to comment #1) > Assuming =app-forensics/aide-0.14.2 based on your `emerge --info' output. Correct. Sorry for the omission! Please provide aide.conf. |
Created attachment 282401 [details] emerge --info I installed AIDE on a recent gentoo system (see attached emerge --info). Everything (aideinit, aide) worked fine, until I started “hiding” AIDE. What I did: • moved /etc/aide/aide.conf to /mnt/stick/aide/aide.conf • changed AIDE-conf to refer to: database=file:/mnt/stick/aide/aide.db database_out=file:/mnt/stick/aide/aide.db.new Now “aideinit -c /mnt/stick/aide/aide.conf” still works, but “aide -c /mnt/stick/aide/aide.conf” fails with “input in flex scanner failed”. Running “aide -V255 -c /mnt/stick/aide/aide.conf” says: Setting verbosity to 255 commandconf():@@include /mnt/stick/aide/aide.conf 1:@@include 4:database = do_dbdef (1) called with (file:/mnt/stick/aide/aide.db) 6:database_out = do_dbdef (2) called with (file:/mnt/stick/aide/aide.db.new) Output database set to "file:/mnt/stick/aide/aide.db.new" "/mnt/stick/aide/aide.db.new" 10:gzip_dbout = 40:Equrule 41:Equrule 42:Equrule 43:Equrule 44:Equrule 45:Equrule 46:Equrule 53:Selrule 54:Selrule 55:Selrule 56:Selrule 57:Selrule 58:Selrule 61:Selrule 62:Selrule 63:Selrule 67:Selrule 68:Selrule 70:Negrule 71:Selrule 73:Negrule 79:Selrule 81:Selrule 82:Negrule 84:Selrule 85:Negrule 100:Selrule 101:Selrule 102:Selrule 112:Selrule 113:Selrule 116:Selrule 117:Selrule WARNING: Debug output enabled Handling / with s "/bin" with node "/" Handling / with s "/sbin" with node "/" Handling /usr with s "/usr/bin" with node "/usr" Handling /usr with s "/usr/sbin" with node "/usr" Handling /usr/local with s "/usr/local/bin" with node "/usr/local" Handling /usr/local with s "/usr/local/sbin" with node "/usr/local" Handling / with s "/lib" with node "/" Handling /usr with s "/usr/lib" with node "/usr" Handling /usr/local with s "/usr/local/lib" with node "/usr/local" Handling /var with s "/var/log" with node "/var" Handling / with s "/dev" with node "/" Handling /var with s "/var/run$" with node "/var" Handling / with s "/proc$" with node "/" Handling /usr with s "/usr/man" with node "/usr" Handling /usr/share with s "/usr/share/man" with node "/usr/share" Handling /usr/local with s "/usr/local/man" with node "/usr/local" Handling /usr with s "/usr/src" with node "/usr" Handling /usr/local with s "/usr/local/src" with node "/usr/local" Handling /usr with s "/usr/include" with node "/usr" Handling /usr/local with s "/usr/local/include" with node "/usr/local" Handling /var/log with n "/var/log/.twr" with node "/var/log" Handling /dev with n "/dev/pts" with node "/dev" Handling /var with n "/var/run" with node "/var" Handling / with n "/proc" with node "/" Handling / with e "/boot$" with node "/" Handling /var with e "/var/log$" with node "/var" tree: "/" 54 ^/bin 55 ^/sbin 62 ^/lib 80 ^/dev 85 ^/proc$ 52= ^/boot$ 86! ^/proc tree: "/usr" 56 ^/usr/bin 57 ^/usr/sbin 63 ^/usr/lib 101 ^/usr/man 113 ^/usr/src 117 ^/usr/include tree: "/usr/local" 58 ^/usr/local/bin 59 ^/usr/local/sbin 64 ^/usr/local/lib 103 ^/usr/local/man 114 ^/usr/local/src 118 ^/usr/local/include tree: "/usr/share" 102 ^/usr/share/man tree: "/var" 72 ^/var/log 82 ^/var/run$ 66= ^/var/log$ 83! ^/var/run tree: "/var/log" 71! ^/var/log/.twr tree: "/var/log/.info" 68 ^/var/log/.info/info.log(.[0-9])?(.gz)? 69 ^/var/log/.info/error.log(.[0-9])?(.gz)? tree: "/dev" 74! ^/dev/pts db_init 256 db_init 1 Opening file "/mnt/stick/aide/aide.db" for r Opened file "/mnt/stick/aide/aide.db" with fd=4 db_in is nonnull input in flex scanner failed