> lati...@vcn.bc.ca wrote: >> Camaleón wrote: >> > It seems to be a known/reported issue: >> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661758 >> >> Thanks to Bob and Camaleon; patching aide works correctly. The patch is >> at >> the link that Camaleon gave before. > > Oh wow. It is a data dependent problem! The problem is that they > dynamically create aide configuration based upon the contents of /dev > which is variable dependent upon the devices and device labels and > other things that are attached to the system at that moment. > > And since that variable user data wasn't expected isn't any escaping > done. So the result is user generated data input (such as unicode > disk labels) improperly quoted. It will work fine on one system but > fail on another depending upon what is attached. > > Bob
So well, this is the patch: --- a/aide.conf.d/70_aide_dev 2012-03-04 11:10:49.258794862 +0100 +++ b/aide.conf.d/70_aide_dev 2012-03-04 07:57:26.282852021 +0100 @@ -6,20 +6,11 @@ echo "!/dev/pts/[0-9]{1,2}$" if [ -e /dev/.udev ]; then # we have udev - # We generate a RamdiskData entry for each file found in /dev (as - # these files change inode and mtim/ctime at each boot anyway). - # /dev/.static is excluded as this is bind-mounted from the persistent - # root /dev, which should be a lot more static. - # Making this any more paranoid would probably mean to implementing most # of udev. Please feel free to submit patches ;) - - # -path is -wholename on sid, but -path still works on sarge and sid - find /dev -path /dev/.static -prune -o -print | \ - sed -e 's/^\(.*\)/\1$ RamdiskData/' \ - -e 's,\\,\\\\,g' -e 's,\.,\\\.,g' \ - -e 's,#,\\#,g' echo "/dev/\.static$ RamdiskData" + echo "/dev/\.static Full" + echo "/dev RamdiskData" else # we have static /dev cat <<EOF It was not needed on Squeeze amd64 server! -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/69ec219b342e37af9bcdab5ebe43f905.squir...@mail.vcn.bc.ca