Bug#406206: [Pkg-aide-maintainers] Bug#406206: aide: AIDE cronjob gives 'onexit: command not found' error

[Marc Haber]

On Tue, Jan 09, 2007 at 04:17:54PM +0100, P.M. van Aalten wrote:
> I can't really believe that not everyone has this problem, but:
> Every day I get an e-mail as a result of the AIDE cron job. It contains:
> ---------------------------------------------------------------
> /etc/cron.daily/aide: line 117: onexit: command not found
> /etc/cron.daily/aide: line 61: onexit: command not found
> run-parts: /etc/cron.daily/aide exited with return code 127
> ---------------------------------------------------------------
> 
> My scripting capabilities are limited, but according to
> /etc/cron.daily/aide, function 'onexit' is defined on line 135 so it sounds logical that the command isn't yet known on lines 61 and 117. AIDE exits with an 
> error message

Your argumentation sounds ok. Line 117 is in an error handler for the
case that the aide lock file cannot be obtained. Can you please verify
whether you might have a stale /var/run/aide/cron.daily.lock hanging
around?

Does moving the function definition of onexit to an earlier place (for
example, right behind the "umask 077" statement in line 39, help?

The error happening in an error handler might be the cause for this
not happening with all installations since this error happens quite
rarely.

>  and I assume (perhaps not justified) that AIDE doesn't do it's
>  intrusion detection.

You can verify this in your logs, see /var/log/aide.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835