[Pkg-aide-maintainers] Bug#582129: Bug#582129: aide: AIDE returned with exit value of 134 on reading gzipped file

[naths]

On Fri, 2010-05-21 at 22:55 +0200, Hannes von Haugwitz wrote:
> tags 582129 +moreinfo
> thanks
> 
> naths wrote:
> > Package: aide
> > Version: 0.14-1
> > Severity: normal
> > 
> > In daily AIDE automated report generated for my system to root mail shows exit
> > code of 134 as shown below
> > 
> > "Errors produced  (1 lines):
> > Aborted
> > 
> > End of AIDE error output.
> > 
> > Output of the daily AIDE run (1 lines):
> > Error reading gzipped file: <fd:6>: buffer error
> > 
> > End of AIDE output."
> > 
> > The same output while running on as cmd
> > #aide -c /etc/aide/aide.conf
> > Error reading gzipped file: <fd:4>: buffer error
> > Aborted
> > #
> > 
> 
> I tried to reproduce this problem with no success.
> 
> Please provide more information about how to reproduce this behavior, if 
> it's still reproducible by you. How often and since when are you seeing 
> this problem? Did you changed something? Have you adjusted your aide.conf?
> 
> Additionally please post the output of 'ls -l /var/lib/aide/' and 'gzip 
> -t /var/lib/aide/aide.db'.
> 
> Thanks
> 
> Hannes

I have not change anything after installation in aide.conf file but use
"update-aide.conf." and then use "#aide -c /etc/aide/aide.conf -i".
as you required,
'ls -l /var/lib/aide/' 
-rw------- 1 root root   86081 May 25 19:48 aide.conf.autogenerated
-rw------- 1 root root      10 May 16 20:28 aide.db
-rw------- 1 root root      10 May 23 20:21 aide.db.new

# gzip -t /var/lib/aide/aide.db
gzip: /var/lib/aide/aide.db: unexpected end of file

output of mail today 
This is an automated report generated by the Advanced Intrusion
Detection
Environment on *.com started at 2010-05-25 20:38:12.
******************************************************************************
*IDE returned with exit code 134.  AIDE returned an unknown non-zero
exit val*
*                             exit value is 134
*
******************************************************************************
Errors produced  (1 lines):
Aborted

End of AIDE error output.

Output of the daily AIDE run (1 lines):
Error reading gzipped file: <fd:5>: buffer error

End of AIDE output.

The check was done against /var/lib/aide/aide.db with the following
characteristics:
  Size     : 10
  Bcount   : 8
  Mtime    : 2010-05-16 20:28:28
  Ctime    : 2010-05-16 20:28:28
  Inode    : 21480
  RMD160   : Fju2Ctv0HGnzSQvsOqpVjdmb5CE=
  TIGER    : 5IrGLu3GcSFIhZE6KmxMjyQAyEBrGizm
  SHA256   : uMCA0xJ29BVlmAPvnXJ1GtufJCBgDywi
  SHA512   : SAQj4+E+Ni4UKgZ7SQN1lrCZWJcVfpkz
  CRC32    : L9Oy/w==
  HAVAL    : yB6IHUOBYyixk8xtruVqtsZEnxKs+UUP
  GOST     : bGuZmDjo5PkMZYDtXAd9TGSRBXZj95Nh

The AIDE run created a new database /var/lib/aide/aide.db.new with the
following characteristics:
  Size     : 10
  Bcount   : 8
  Inode    : 21403
  RMD160   : Fju2Ctv0HGnzSQvsOqpVjdmb5CE=
  TIGER    : 5IrGLu3GcSFIhZE6KmxMjyQAyEBrGizm
  SHA256   : uMCA0xJ29BVlmAPvnXJ1GtufJCBgDywi
  SHA512   : SAQj4+E+Ni4UKgZ7SQN1lrCZWJcVfpkz
  CRC32    : L9Oy/w==
  HAVAL    : yB6IHUOBYyixk8xtruVqtsZEnxKs+UUP
  GOST     : bGuZmDjo5PkMZYDtXAd9TGSRBXZj95Nh

End of AIDE daily cron job at 2010-05-25 20:38, run time 2 seconds
Probably i have used wrong sequence of cmd.

Thanks