[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: aide error



latinfo@vcn.bc.ca wrote:
> Camaleón wrote:
> > It seems to be a known/reported issue:
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661758
> 
> Thanks to Bob and Camaleon; patching aide works correctly. The patch is at
> the link that Camaleon gave before.

Oh wow.  It is a data dependent problem!  The problem is that they
dynamically create aide configuration based upon the contents of /dev
which is variable dependent upon the devices and device labels and
other things that are attached to the system at that moment.

And since that variable user data wasn't expected isn't any escaping
done.  So the result is user generated data input (such as unicode
disk labels) improperly quoted.  It will work fine on one system but
fail on another depending upon what is attached.

Bob

Attachment: signature.asc
Description: Digital signature


Reply to: