[Pkg-aide-maintainers] Bug#466604: Bug#466604: Aide floods "open_dir():Not a directory" in logs

[Marc Haber]

On Tue, Feb 19, 2008 at 02:02:04PM -0800, carbonated beverage wrote:
> Recently, I uninstalled (dpkg --purge) and re-installed Aide.  All previous
> configuration files and databases were removed.  I added the following to
> /etc/aide/aide.conf:
> 
> !/dev
> !/home
> !/mnt
> !/proc
> !/root
> !/var
> !/selinux
> !/sys
> !/debug
> !/lib/init/rw
> !/tmp
> !/config
> 
> Except I get a flood of these messages, still:
> 
> open_dir():Not a directory: /var/log/aide/aide.log
> open_dir():Not a directory: /var/log/aide/aide.log.3.gz
> <snip about 8,000 more entries>

This looks like you still have the rules that are pulled in from
/etc/aide/aide.conf.d active. Is that desired?

Are you aware that Debian's aide packages build the actual config at
run time?

> The flood of these messages in the logs is making looking at the daily reports
> rather difficult.
> 
> Aide was working before the latest Etch update, when the cron job started
> giving me errors (bug 438429), hence the reinstall.
> 
> Has anything changed recently that would affect Aide?

Maybe your reinstall changed your local configuration changes?

Anyway, I cannot reproduce your issue on Debian sid. On Debian etch, a
configuration like yours gives a single
open_dir():Not a directory: /var/log/syslog

I'll guess that the issue was fixed somewhere since etch's release,
though the changelog doesn't say this explicitly. So it must be a
corollary fix.

Maybe try with a backport?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190