Public bug reported:
We run AIDE on systems that use unattended-upgrade to install security
patches. When the upgrades run, we often get large email reports from
AIDE. We have FILTERUPDATES=yes in /etc/defaults/aide but the filtering
seems to not be very effective a lot of the time, especially
I ran into this today and the problem turned out to be /tmp:
# ls -ld /tmp
drwxrwxr-x 11 ubuntu ubuntu 4096 Aug 24 00:23 /tmp
This fixed it:
# chown root:root /tmp
# chmod 1777 /tmp
I don't know how /tmp got in that state on my server (it's a fairly
fresh install of 16.04) but perhaps that's
