Dear maintainers, after some unsuccessful tries to monitor the failed call to realloc I finally took the sources and added some monitoring into the aide binary itself. (Yes, I'm writing about classic dirty printf debugging. ;-)
And today I was successful, the problem is a call to checked_realloc in util.c with a request of 0 bytes. Before that the log contained a few warnings about a missing sub-directory (sys) of the missing upper directory (no-network). WARNING: tried to read access ACL on /var/opt/lxc/no-network/sys but failed with: No such file or directory WARNING: tried to read default ACL on /var/opt/lxc/no-network/sys but failed with: Invalid argument WARNING: listxattrs failed for /var/opt/lxc/no-network/sys:No such file or directory WARNING: lgetfilecon_raw failed for /var/opt/lxc/no-network/sys: No such file or directory checked_realloc(0x7fe3c9145380, 0) failed to reallocate 0 bytes ERROR: realloc: failed to allocate memory End of AIDE error output A first glance at all the calls to checked_realloc makes me guess this can only happen in one of the calls in do_md.c, all others should be >0. Hope this helps & best regards, Thomas -- 𝓣𝓱𝓸𝓶𝓪𝓼 𝓓𝓸𝓻𝓷𝓮𝓻