Package: aide Version: 0.18.2-1 Severity: important X-Debbugs-Cc: debian-b...@th-dorner.de
Dear Maintainer (that's you Marc, isn't it ;-), The last two daily aide runs on my desktop machine failed with an error 22. Today's log-file shows: aide run on XXXXX.XXXXX started at 2023-04-25 06:38:52. ****************************************************************************** * AIDE returned with exit code 22. unknown non-zero exit value 22 * ****************************************************************************** AIDE error output (465 lines): WARNING: hash calculation: '/run/user/1065/dconf/user' has been changed (changed attributes: c+m+i, hash could not be calculated) WARNING: hash calculation: '/var/backups/apt.extended_states.3.gz' has been changed (changed attributes: s+c+m+i, hash could not be calculated) WARNING: hash calculation: '/var/backups/apt.extended_states.6.gz' has been changed (changed attributes: s+c+m+i, hash could not be calculated) WARNING: hash calculation: '/var/backups/apt.extended_states.4.gz' has been changed (changed attributes: s+c+m+i, hash could not be calculated) WARNING: hash calculation: '/var/backups/apt.extended_states.1.gz' has been changed (changed attributes: s+c+m+i, hash could not be calculated) WARNING: hash calculation: '/var/backups/apt.extended_states.2.gz' has been changed (changed attributes: s+c+m+i, hash could not be calculated) WARNING: hash calculation: '/var/backups/apt.extended_states.5.gz' has been changed (changed attributes: s+c+m+i, hash could not be calculated) WARNING: hash calculation: '/var/backups/apt.extended_states.0' has been changed (changed attributes: i, hash could not be calculated) WARNING: hash calculation: '/var/lib/systemd/timers/stamp-chkrootkit.timer' has been changed (changed attributes: c+m, hash could not be calculated) WARNING: hash calculation: '/var/log/chkrootkit/log.today' has been changed (changed attributes: c+m, hash could not be calculated) WARNING: hash calculation: '/var/log/chkrootkit/chkrootkit-daily.log' has been changed (changed attributes: c+m, hash could not be calculated) WARNING: hash calculation: '/var/log/chkrootkit/log.today.raw' has been changed (changed attributes: c+m, hash could not be calculated) [...some more normal warnings...] WARNING: tried to read access ACL on /var/opt/lxc/no-network/usr/share/doc/libgpg-error0 but failed with: No such file or directory WARNING: tried to read default ACL on /var/opt/lxc/no-network/usr/share/doc/libgpg-error0 but failed with: Invalid argument WARNING: listxattrs failed for /var/opt/lxc/no-network/usr/share/doc/libgpg-error0:No such file or directory WARNING: lgetfilecon_raw failed for /var/opt/lxc/no-network/usr/share/doc/libgpg-error0: No such file or directory ERROR: realloc: failed to allocate memory End of AIDE error output AIDE detected no changes. End of AIDE daily aide check at 2023-04-25 08:13, run time 5672 seconds funny, AIDE did not leave a log. Version 0.18.2-1 had been installed on 2023-04-21, so it did run OK at least two times. It also run OK after a manual "systemctl start dailyaidecheck" in a terminal window yesterday. This did not work today though. The last warnings like the 4 last ones above all come from a test directory used by my current project. The files and directories there have been deleted and recreated several times during the aide run. Memory of the machine should be enough with 32 GB mostly used as cache: MiB Mem: 32025.9 total, 1145.8 free, 3102.1 used, 28268.6 buff/cache I think I've always be working on the project during the failures, so it maybe a reallocation for a deleted or recreated entry. Currently I've no further idea to narrow it down. The directory /var/lib/aide/dailyaidecheck with the temporary log-files has been removed, but maybe I can modify something to keep it to maybe get further info. -- System Information: Debian Release: 12.0 APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.1.0-8-amd64 (SMP w/16 CPU threads; PREEMPT) Kernel taint flags: TAINT_CPU_OUT_OF_SPEC Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages aide depends on: ii libacl1 2.3.1-3 ii libaudit1 1:3.0.9-1 ii libc6 2.36-9 ii libcap2 1:2.66-3 ii libext2fs2 1.47.0-2 ii libmhash2 0.9.9.9-9 ii libpcre2-8-0 10.42-1 ii libselinux1 3.4-1+b5 ii zlib1g 1:1.2.13.dfsg-1 Versions of packages aide recommends: ii aide-common 0.18.2-1 Versions of packages aide suggests: pn figlet <none> -- no debconf information
