Package: release.debian.org
Severity: normal
Tags: trixie
X-Debbugs-Cc: [email protected]
Control: affects -1 + src:aide
User: [email protected]
Usertags: pu
Hi,
this is the latest rule update for aide in trixie. It also fixes a
yet-unfiled bug that might cause the "needsroot" cache file to grow
indefinetely until an internal aide buffer is filled up and aide aborts
(in a controlled way).
This is meant for the trixie point release that is scheduled for release
next week.
[ Impact ]
If the update isn't approved, users will get more false positives during
their daily aide runs. They might also get aide aborts with an error
message when the needsroot cache is getting too big. They can achive
the same results as this update by pulling the rules from Unstable
or from using a backport.
[ Tests ]
The package has simple autopkgtests that verify whether the rules are
syntactically correct, and they are pulled from unstable/testing and
therefore tested there and on my personal fleet of about 50 machines
(running backports though).
[ Risks ]
It's a config only change, and a one-liner in a shellscript.
[ Checklist ]
[X] *all* changes are documented in the d/changelog
[X] I reviewed all changes and I approve them
[X] attach debdiff against the package in (old)stable
[X] the issue is verified as fixed in unstable
[ Changes ]
Use id -u instead of $EUID in 10_aide_lvm_needsroot
update rules for exim4, apt-cacher-ng, and samba
Greetings
Marc
diff -Nru aide-0.19.1/debian/aide.conf.d/10_aide_lvm_needsroot
aide-0.19.1/debian/aide.conf.d/10_aide_lvm_needsroot
--- aide-0.19.1/debian/aide.conf.d/10_aide_lvm_needsroot 2026-10-22
19:46:34.000000000 +0200
+++ aide-0.19.1/debian/aide.conf.d/10_aide_lvm_needsroot 2026-11-06
21:05:28.000000000 +0100
@@ -19,7 +19,7 @@
DIR="/var/lib/aide"
CACHEFILE="$DIR/10_aide_rootrules_cache"
-if [ "$EUID" != "0" ]; then
+if [ "$(id -u)" != "0" ]; then
# we are not called from the buildcache job and are expected
# to spew what we have cached
if [ -r "$CACHEFILE" ]; then
diff -Nru aide-0.19.1/debian/aide.conf.d/31_aide_apt-cacher-ng
aide-0.19.1/debian/aide.conf.d/31_aide_apt-cacher-ng
--- aide-0.19.1/debian/aide.conf.d/31_aide_apt-cacher-ng 2026-10-22
19:46:34.000000000 +0200
+++ aide-0.19.1/debian/aide.conf.d/31_aide_apt-cacher-ng 2026-11-06
21:05:28.000000000 +0100
@@ -30,16 +30,16 @@
@@define ACNGDTNR
(@@{ACNGYYYY_MM_DD_HHMM_XX}|T-@@{ACNGYYYY_MM_DD_HHMM_XX}-F-@@{ACNGYYYY_MM_DD_HHMM_XX})
@@endif
- /@@{ACNGCACHE}$ d VarDir-n
+/@@{ACNGCACHE}$ d VarDir-n
!/@@{ACNGCACHE}/_actmp$ d
!/@@{ACNGCACHE}/_actmp/(combined\\.diff|patch\\.base)$ f
- /@@{ACNGCACHE}/_(expending_(damaged|dat))$ f VarFile
+/@@{ACNGCACHE}/_(expending_(damaged|dat))$ f VarFile
!/@@{ACNGCACHE}/_(exfail_cnt)$ f
- /@@{ACNGCACHE}/_xstore/qstats/[a-z]$ d VarDir
+/@@{ACNGCACHE}/_xstore/qstats/[a-z]$ d VarDir
!/@@{ACNGCACHE}/_xstore/qstats/([a-z]/)?[0-9]{10}\\.[0-9]{4,6}$ l
-
/@@{ACNGCACHE}/_xstore/rsnap/@@{ACNGDISTS}(/@@{ACNGMNC}/binary-@@{ACNGARCHS})?$
d VarDir
-!/@@{ACNGCACHE}/_xstore/rsnap/@@{ACNGDISTS}(/@@{ACNGMNC}/binary-@@{ACNGARCHS})?/[[:digit:]]{21,26}$
f
- /@@{ACNGCACHE}/@@{ACNGDEB}$ d VarDir-n
+/@@{ACNGCACHE}/_xstore/rsnap/@@{ACNGDISTS}(/@@{ACNGMNC}/binary-@@{ACNGARCHS})?$
d VarDir
+!/@@{ACNGCACHE}(/_xstore/rsnap)?/@@{ACNGDISTS}(/@@{ACNGMNC}/binary-@@{ACNGARCHS})?/[[:digit:]]{18,29}$
f
+/@@{ACNGCACHE}/@@{ACNGDEB}$ d VarDir-n
!/@@{ACNGCACHE}/@@{ACNGDISTS}$ d
!/@@{ACNGCACHE}/@@{ACNGDISTS}(/@@{ACNGMNC}/binary-@@{ACNGARCHS})?/(In)?Release(~|(\\.gpg)?(\\.hea(d|%))?)?$
f
# the doubled ACNGCACHE is #1050850
@@ -55,7 +55,7 @@
!/@@{ACNGCACHE}/@@{ACNGDISTS}/@@{ACNGMNC}/i18n$ d
!/@@{ACNGCACHE}/@@{ACNGDISTS}/@@{ACNGMNC}/(Contents-@@{ACNGARCHS}\\.[gx]z)(\\.head|~)?$
f
!/@@{ACNGCACHE}/@@{ACNGDISTS}/@@{ACNGMNC}/(Contents-@@{ACNGARCHS}\\.[gx]z)(\\.head|~)?$
f
-!/@@{ACNGCACHE}/@@{ACNGDISTS}/@@{ACNGMNC}/(debian-installer/)?binary-@@{ACNGARCHS}/(Packages(\\.(gz|bz2|xz))?)(\\.hea(d|%)|~)?$
f
+!/@@{ACNGCACHE}/@@{ACNGDISTS}/@@{ACNGMNC}/(debian-installer/)?binary-@@{ACNGARCHS}/(Packages\.?(\\.(gz|bz2|xz))?)(\\.hea(d|%)|~|\\.@@{UNIX_TS_2015_2033})?$
f
!/@@{ACNGCACHE}/@@{ACNGDISTS}/@@{ACNGMNC}/dep11/(Components-@@{ACNGARCHS}\\.yml\\.xz|icons-(128x128|48x48|64x64)\\.tar\\.gz)(\\.head)?$
f
/@@{ACNGCACHE}/@@{ACNGDISTS}/@@{ACNGMNC}/i18n/Translation-(de|en)\\.diff$ d
VarDir
/@@{ACNGCACHE}/@@{ACNGDISTS}/@@{ACNGMNC}/(Contents-@@{ACNGARCHS}|Sources\\.diff)$
d VarDir
diff -Nru aide-0.19.1/debian/aide.conf.d/31_aide_exim4
aide-0.19.1/debian/aide.conf.d/31_aide_exim4
--- aide-0.19.1/debian/aide.conf.d/31_aide_exim4 2026-10-22
19:46:34.000000000 +0200
+++ aide-0.19.1/debian/aide.conf.d/31_aide_exim4 2026-11-06
21:05:28.000000000 +0100
@@ -9,7 +9,7 @@
!/@@{EXIM4_VSE}/msglog/@@{EXIM4_SPOOLFILERE}$ f
!/@@{EXIM4_VSE}/gnutls-params$ f
!/@@{EXIM4_VSE}/\\.rnd$ f
- /@@{EXIM4_VSE}(/(input|msglog|scan))?$ d VarDir
+ /@@{EXIM4_VSE}(/(db|input|msglog|scan))?$ d VarDir
/@@{EXIM4_VLE}$ d VarDir
/@@{EXIM4_VLE}/config\\.autogenerated$ f VarFile
/@@{RUN}/exim4$ d RecreatedDir
diff -Nru aide-0.19.1/debian/aide.conf.d/31_aide_samba
aide-0.19.1/debian/aide.conf.d/31_aide_samba
--- aide-0.19.1/debian/aide.conf.d/31_aide_samba 2026-10-22
19:46:34.000000000 +0200
+++ aide-0.19.1/debian/aide.conf.d/31_aide_samba 2026-11-06
21:05:28.000000000 +0100
@@ -26,6 +26,7 @@
# /var/log/samba/log\\.[sn]mbd\\.7.@@{LOGEXT}$ f LastSerLog
# /var/log/samba/log\\.(@@{IP4ADDRESS}|@@{IP6ADDRESSU})$ f ActLog+ANF
# /var/log/samba/log\\.smbd\\.spoolssd$ f ActLog
+ /var/log/samba/log\.[[:xdigit:]]{4}(_[[:xdigit:]]{4}){7}$ f ANF
/var/lib/samba/dhcp\\.conf$ f VarFile
/var/lib/samba(/private/msg\\.sock)?$ d VarDir
!/var/lib/samba/private/msg\\.sock/[[:digit:]]+$ s
diff -Nru aide-0.19.1/debian/changelog aide-0.19.1/debian/changelog
--- aide-0.19.1/debian/changelog 2026-10-22 19:46:48.000000000 +0200
+++ aide-0.19.1/debian/changelog 2026-11-06 21:05:28.000000000 +0100
@@ -1,3 +1,12 @@
+aide (0.19.1-2+deb13u6) trixie; urgency=medium
+
+ * improve 31_aide_exim4
+ * improve 31_aide_apt-cacher-ng
+ * improve 31_aide_samba
+ * fix bug in 31_aide_lvm_needsroot: EUID is undefined in dash.
+
+ -- Marc Haber <[email protected]> Fri, 06 Nov 2026 21:05:28
+0100
+
aide (0.19.1-2+deb13u5) trixie-security; urgency=medium
* retry upload a second time
