Bug 476189
Summary: | audispd activates the same plugin several times | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 5 | Reporter: | Eduard Benes <ebenes> |
Component: | audit | Assignee: | Steve Grubb <sgrubb> |
Status: | CLOSED ERRATA | QA Contact: | BaseOS QE <qe-baseos-auto> |
Severity: | medium | Docs Contact: | |
Priority: | low | ||
Version: | 5.3 | ||
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: |
previously, audisp would read not only its configuration file (in
/etc/audisp/plugins.d/) but any files with names similar to its configuration
file found in the same directory, for example, backups of the configuration
file. As a result, if a plugin were listed in more than one configuration
file, it would be activated multiple times. audisp now filters out any file with a '.' in its name to avoid reading the backup files and therefore avoids activating multiple copies of plugins.
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2009-09-02 09:50:32 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Eduard Benes
2008-12-12 11:33:48 UTC
Fixed in upstream svn commit 206. audit-1.7.13-1 was built to solve this problem. Release note added. If any revisions are required, please set the "requires_release_notes" flag to "?" and edit the "Release Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: previously, audisp would read not only its configuration file (in /etc/audisp/plugins.d/) but any files with names simlar to its configuration file found in the same directory, for example, backups of the configuration file. As a result, if a plugin were listed in more than one configuration file, it would be activated multiple times. audisp now reads only its configuration file and therefore avoids activating multiple copies of plugins. Release note updated. If any revisions are required, please set the "requires_release_notes" flag to "?" and edit the "Release Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. Diffed Contents: @@ -1,6 +1,5 @@ previously, audisp would read not only its configuration file (in -/etc/audisp/plugins.d/) but any files with names simlar to its configuration +/etc/audisp/plugins.d/) but any files with names similar to its configuration file found in the same directory, for example, backups of the configuration file. As a result, if a plugin were listed in more than one configuration -file, it would be activated multiple times. audisp now reads only its +file, it would be activated multiple times. audisp now filters out any file with a '.' in its name to avoid reading the backup files and therefore avoids activating multiple copies of plugins.-configuration file and therefore avoids activating multiple copies of plugins. An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHEA-2009-1303.html |