Pre-clearance for aide bug fix of #596230
Hi,
Hannes von Haugwitz has found a bad bug in aide 0.15 (#596230).
Upstream has released 0.15.1, which contains only the patches listed
in #596230 (aside from using a later autofoo).
We also have a number of smaller changes against the rules we ship:
--- a/debian/aide.conf.d/31_aide_apt
+++ b/debian/aide.conf.d/31_aide_apt
@@ -55,6 +55,11 @@ echo "${VARDIR}/extended_states$ VarFile"
echo "${VARDIR}$ VarDir"
echo "${LOGDIR}/term\.log$ Log"
+echo "/var/backups/apt\.extended_states\.0$ LowLog"
+echo "/var/backups/apt\.extended_states\.1\.gz$ LoSerMemberLog"
+echo "/var/backups/apt\.extended_states\.[2345]\.gz$ SerMemberLog"
+echo "/var/backups/apt\.extended_states\.6\.gz$ HiSerMemberLog"
+
if [ "$IGNORE_ARCHIVES" = "yes" ]; then
echo "!$ARCHIVESDIR/[-a-zA-Z0-9%\.~_+]+_(@@{ARCH}|all)\.deb$"
fi
diff --git a/debian/aide.conf.d/31_aide_munin b/debian/aide.conf.d/31_aide_munin
index ce05b60..71e64b6 100644
--- a/debian/aide.conf.d/31_aide_munin
+++ b/debian/aide.conf.d/31_aide_munin
@@ -10,7 +10,7 @@
!/var/run/munin/munin-(update|datafile|graph|limits|html)\.lock$
/var/lib/munin/(limits|datafiles|munin-(update|graph)\.stats)$ VarFile
!/var/lib/munin/munin-(update|graph)\.stats\.tmp$
-/var/lib/munin/plugin-state/(exim_mailstats|(smart-[sh]d[a-z]|munin-cupsys-pages)\.state)$ VarFile
+/var/lib/munin/plugin-state/(exim_mailstats(-(([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5])\.){3}([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5]))?|(smart-[sh]d[a-z]|munin-cupsys-pages)\.state)$ VarFile
/var/lib/munin/plugin-state/(postfix_mailvolume|_proc_net_tcp[6]?)$ VarFile
/var/lib/munin/datafile$ VarFile
/var/lib/munin$ VarDir
diff --git a/debian/aide.conf.d/31_aide_rkhunter b/debian/aide.conf.d/31_aide_rkhunter
index 49dfce4..26cbeba 100644
--- a/debian/aide.conf.d/31_aide_rkhunter
+++ b/debian/aide.conf.d/31_aide_rkhunter
@@ -1,4 +1,5 @@
-/var/lib/rkhunter/db/(rkhunter\.dat(\.old)?|(mirrors|rkhunter_prop_list)\.dat)$ VarTime
+/var/lib/rkhunter/db/(mirrors|rkhunter_prop_list)\.dat$ VarTime
+/var/lib/rkhunter/db/rkhunter\.dat(\.old)?$ InodeData
/var/lib/rkhunter/tmp/(group|passwd)$ VarFile
/var/lib/rkhunter/(db|tmp)$ VarDir
/var/log/rkhunter\.log$ Log
What would the release team prefer to get these fixes into squeeze:
- upload aide 0.15.1 to unstable, let it migrate to squeeze
- update aide 0.15 with the patches that virtually make it aide 0.15.1?
- Add the rule patches or not?
Please indicate what you would prefer.
Greetings
Marc
--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 3221 2323190
Reply to: