This bug was fixed in the package audit - 1:2.8.2-1ubuntu1.1
---
audit (1:2.8.2-1ubuntu1.1) bionic; urgency=medium
* d/p/04-startup-hang.patch: fix hang on startup (LP: #1848330)
-- Andreas Hasenack Fri, 08 Jan 2021 14:23:06
-0300
** Changed in: audit (Ubuntu Bionic)
TL;DR verification-succeeded
Ok, so here are the details.
I have two vms: one called orig-audit-bionic, the other called sru-
audit-bionic, where I ran the script from comment #23 over the weekend
in multiple scenarios. With auditd-1:2.8.2-1ubuntu1, the bug is
reproduced after a few hours,
I prepared two bionic instances to run over the weekend.
One is running auditd from bionic, and the other is running the SRU
proposed package.
I have auditd being restarted via this script in both (just the email message
is different, to say which package it was):
#!/bin/bash
result=0
while
I think it's important to distinguish:
a) merely failing to reproduce the issue; versus
b) confirming reproduction of the issue against the previous version of
the package (version 1:2.8.2-1ubuntu1 in this case), and then confirming
that the proposed version (version 1:2.8.2-1ubuntu1.1 in this
Hi, all.
I obtained feedback from one Canonical customer (with a Support Case
opened just for that), that hit the very same bug and, when testing the
package sitting in -proposed, didn't reproduce the issue anymore.
>From his own words:
"I wasn't able to recreate the auditd problem with the
Dr. Harbott, would you be able to test the new audit packages in bionic-
proposed? The SRU team is reluctant to approve this update without some
sort of confirmation that it fixes the bug, and I haven't been able to
reproduce it myself.
--
You received this bug notification because you are a
** Tags removed: verification-done-bionic
** Tags added: verification-needed-bionic
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to audit in Ubuntu.
https://bugs.launchpad.net/bugs/1848330
Title:
Installing auditd
I'd like to see some testing from someone actually affected please.
Otherwise we'd be releasing a change that risks regression to users not
affected, for a bug that we're not even sure if we've fixed.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages,
Since it's difficult to reproduce the bug, what I'm going to do is setup
a system with the previous auditd, setup some rules, confirm they are
working, then upgrade, and confirm it keeps working, also after a
reboot.
# Bionic verification
auditd from bionic:
auditd:
Installed:
All regressions have been resolved after some retries.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to audit in Ubuntu.
https://bugs.launchpad.net/bugs/1848330
Title:
Installing auditd sometimes fails in post-inst
Status
I'm going over the DEP8 failures
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to audit in Ubuntu.
https://bugs.launchpad.net/bugs/1848330
Title:
Installing auditd sometimes fails in post-inst
Status in audit package in
I verified that this is fixed in both Focal and Hirsute by examining the
source (so presumably Groovy too).
** Also affects: audit (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: audit (Ubuntu)
Status: In Progress => Fix Released
** Changed in: audit (Ubuntu
Package uploaded to the SRU queue
** Changed in: audit (Ubuntu)
Status: Confirmed => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to audit in Ubuntu.
https://bugs.launchpad.net/bugs/1848330
Title:
** Description changed:
[Impact]
Sometimes, auditd will get stuck when starting up, causing systemd to
kill it after a while since it (systemd) never got the start
notification.
Upstream troubleshooted this to be caused by calling a syslog() function
inside a signal handler.
** Merge proposal linked:
https://code.launchpad.net/~ahasenack/ubuntu/+source/audit/+git/audit/+merge/396028
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to audit in Ubuntu.
https://bugs.launchpad.net/bugs/1848330
** Description changed:
[Impact]
- * An explanation of the effects of the bug on users and
+ Sometimes, auditd will get stuck when starting up, causing systemd to
+ kill it after a while since it (systemd) never got the start
+ notification.
- * justification for backporting the fix to
Yikes @Kodiak, sounds painful :(
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to audit in Ubuntu.
https://bugs.launchpad.net/bugs/1848330
Title:
Installing auditd sometimes fails in post-inst
Status in audit package in
** Description changed:
- This happens sometimes when installing auditd on Ubuntu 18.04.2, most
- installations work successfully, though. Re-running the install also
- fixes the issue, but the failure breaks our automation. The log from the
- failure looks like this:
+ [Impact]
+
+ * An
Apologies - I don't remember the full specifics here but IIRC, the
Mandiant FireEye HX agent foolishly re-implements Linux Audit, and it's
every bit as terrible as that sounds. We discovered that we needed to
basically purge both FireEye HX and Auditd on the system, then install
Auditd, then
I'm having difficulties reproducing the bug, to validate the patch. I
build bionic test packages with the patch mentioned earlier, if someone
wants to test: https://launchpad.net/~ahasenack/+archive/ubuntu/audit-
startup-hang-1848330
--
You received this bug notification because you are a member
** Changed in: audit (Debian)
Status: Unknown => New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to audit in Ubuntu.
https://bugs.launchpad.net/bugs/1848330
Title:
Installing auditd sometimes fails in post-inst
correct source package name is audit, not auditd (apparently we have/had
both)
** Changed in: auditd (Ubuntu)
Assignee: (unassigned) => Andreas Hasenack (ahasenack)
** Bug watch added: Debian Bug tracker #962451
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962451
** Also affects:
22 matches
Mail list logo
