Package: aide
Version: 0.19.1-2+deb13u2
Severity: normal

Dear Maintainer,

after adding a bad entry to my /etc/aide/aide.conf.d/80_aide_local_defs
the aide job immediately finished with:

"AIDE returned with exit code 17. Invalid configuration"
and
"ERROR: /etc/aide/aide.conf.d/80_aide_local_defs:147: syntax error"

That was correct of course.
But the systemd job did not fail, here the journald entries:

Feb 12 08:32:49 XXX systemd[1]: Starting dailyaidecheck.service - daily AIDE 
check...
Feb 12 08:32:50 XXX dailyaidecheck[29126]: WARN: it is not possible to use 
mail(1) unless aide is run as root or as non-root with added capabilities 
(either via systemd or via capsh). See /usr/share/doc/aide->
Feb 12 08:32:50 XXX systemd[1]: dailyaidecheck.service: Deactivated 
successfully.
Feb 12 08:32:50 umbra systemd[1]: Finished dailyaidecheck.service - daily AIDE 
check.

This made the restart after the fix a bit tricky (several systemctl
commands needed), as it already had been run "successfully" once today.

I would expect a failing service in this case.

Best regards, Thomas


-- System Information:
Debian Release: 13.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.69+deb13-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages aide depends on:
ii  libacl1        2.3.2-2+b1
ii  libaudit1      1:4.0.2-2+b2
ii  libc6          2.41-12+deb13u1
ii  libcap2        1:2.75-10+b3
ii  libext2fs2t64  1.47.2-3+b7
ii  libnettle8t64  3.10.1-1
ii  libpcre2-8-0   10.46-1~deb13u1
ii  libselinux1    3.8.1-1
ii  zlib1g         1:1.3.dfsg+really1.3.1-1+b1

Versions of packages aide recommends:
ii  aide-common  0.19.1-2+deb13u2

Versions of packages aide suggests:
pn  figlet  <none>

-- no debconf information

Reply via email to