Package: aide-common
Version: 0.17.3-4
Severity: normal

Hello

After upgrade to Debian 11 I get this E-Mail each day:

----------------
This is an automated report generated by the Advanced Intrusion Detection 
environment on joshua.hin.de started
+at 2021-09-13 00:25:01.

******************************************************************************
*          AIDE returned with exit code 17. Invalid configuration!           *
******************************************************************************


Errors produced  (1 lines):
  ERROR: /etc/aide/aide.conf.d/31_aide_munin-nodes (stdout):1: unexpected 
character: '/' (line:
+'/var/cache/munin/www/localdomain\n/(index\.html|localhost\\.localdomain/[-_[:alnum:]]+\.(png|html))$
 f
+VarFile/var/lib/munin/localdomain/localhost\\.localdomain\n-.*\.rrd$ f
+VarFile/@@{RUN}/munin/munin-(update|datafile|localdomain-localhost\\.localdomain|limits)\.lock$
 f VarFile')

End of AIDE error output.

funny, AIDE did not leave a log.

End of AIDE daily cron job at 2021-09-13 00:25, run time 3 seconds
----------------

I think I didn't changed that file so I filed this bug report.


Jochen


-- System Information:
Debian Release: 11.0
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/4 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages aide-common depends on:
ii  aide                    0.17.3-4+b2
ii  bsd-mailx [mailx]       8.1.2-0.20180807cvs-2
ii  cdebconf [debconf-2.0]  0.260
ii  debconf [debconf-2.0]   1.5.77
ii  liblockfile1            1.17-1+b1
ii  ucf                     3.0043

Versions of packages aide-common recommends:
ii  cron  3.0pl1-137

aide-common suggests no packages.

-- debconf information:
* aideinit/overwritenew: true
  aide/newlibdir: false
* aideinit/copynew: true
* aide/aideinit: false

Reply via email to