Your message dated Sat, 26 Aug 2023 15:31:49 +0200
with message-id <1b753a61-618d-4b13-b083-579855402...@debian.org>
and subject line Re: audit enabled despite nothing requesting it
has caused the Debian Bug report #1038993,
regarding audit enabled despite nothing requesting it
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1038993: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: systemd
Version: 253-3
Severity: normal
X-Debbugs-Cc: j...@joshtriplett.org
The NEWS.Debian for the latest version of systemd mentions no longer
disabling audit, and relying on the audit socket being disabled by
default. However, despite that, upgrading systemd seems to have enabled
the audit socket unit:
~$ systemctl | grep audit
systemd-journald-audit.socket loaded active running Journal Audit Socket
And there are a pile of audit messages in dmesg and the journal,
drowning out other messages.
I checked, and no units have Audit=yes, nor does anything appear to
depend on systemd-journald-audit.socket, nor is
systemd-journald-audit.socket included in sockets.target.wants.
- Josh Triplett
-- Package-specific info:
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64
Kernel: Linux 6.3.0-1-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages systemd depends on:
ii libacl1 2.3.1-3
ii libaudit1 1:3.0.9-1
ii libblkid1 2.38.1-5+b1
ii libc6 2.36-9
ii libcap2 1:2.66-4
ii libcryptsetup12 2:2.6.1-4
ii libfdisk1 2.38.1-5+b1
ii libgcrypt20 1.10.2-2
ii libkmod2 30+20230519-1
ii liblz4-1 1.9.4-1
ii liblzma5 5.4.1-0.2
ii libmount1 2.38.1-5+b1
ii libp11-kit0 0.24.1-2
ii libseccomp2 2.5.4-1+b3
ii libselinux1 3.4-1+b6
ii libssl3 3.0.9-1
ii libsystemd-shared 253-3
ii libsystemd0 253-3
ii libzstd1 1.5.4+dfsg2-5
ii mount 2.38.1-5+b1
ii systemd-dev 253-3
Versions of packages systemd recommends:
ii dbus [default-dbus-system-bus] 1.14.8-1
ii systemd-timesyncd [time-daemon] 253-3
Versions of packages systemd suggests:
ii libfido2-1 1.13.0-1
ii libqrencode4 4.1.1-1
ii libtss2-esys-3.0.2-0 3.2.1-3
ii libtss2-mu0 3.2.1-3
pn libtss2-rc0 <none>
ii policykit-1 122-4
ii polkitd 122-4
pn systemd-boot <none>
pn systemd-container <none>
pn systemd-homed <none>
pn systemd-resolved <none>
pn systemd-userdbd <none>
Versions of packages systemd is related to:
ii dbus-user-session 1.14.8-1
pn dracut <none>
ii initramfs-tools 0.142
pn libnss-systemd <none>
ii libpam-systemd 253-3
ii udev 253-3
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 254-1
On Wed, 23 Aug 2023 13:52:35 +0200 Michael Biebl <bi...@debian.org> wrote:
On Sat, 24 Jun 2023 00:38:16 -0700 Josh Triplett <j...@joshtriplett.org>
wrote:
> Package: systemd
> Version: 253-3
> Severity: normal
> X-Debbugs-Cc: j...@joshtriplett.org
>
> The NEWS.Debian for the latest version of systemd mentions no longer
> disabling audit, and relying on the audit socket being disabled by
> default. However, despite that, upgrading systemd seems to have enabled
> the audit socket unit:
>
> ~$ systemctl | grep audit
> systemd-journald-audit.socket loaded active running Journal Audit
Socket
>
> And there are a pile of audit messages in dmesg and the journal,
> drowning out other messages.
I think this is fixed in v254.
Can you please double check?
The commit I'm referring to is
https://github.com/bluca/systemd/commit/362235bf59f8ddc6d67be3d6c8604f7fd05d383d
If this doesn't fix your issue, please reopen the bug report or just let
me know.
Regards,
Michael
OpenPGP_signature.asc
Description: OpenPGP digital signature
--- End Message ---
