[Bug 1196829] New: Failed to start auditd rules generation
http://bugzilla.opensuse.org/show_bug.cgi?id=1196829 Bug ID: 1196829 Summary: Failed to start auditd rules generation Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: armv7 OS: openSUSE Leap 15.4 Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta@cboltz.de Reporter: matwey.kornilov@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Hi, I am trying openSUSE-Leap-15.4-ARM-JeOS-beaglebone.armv7l-2021.12.06-Build2.30.raw.xz image on BeagleBone Black board. I see that augenrules.service is failed at start with default configuration. � augenrules.service - auditd rules generation Loaded: loaded (/usr/lib/systemd/system/augenrules.service; static) Active: failed (Result: exit-code) since Thu 2022-02-24 12:00:56 UTC; 1 week 4 days ago Docs: man:augenrules(8) Process: 1070 ExecStart=/sbin/augenrules --load (code=exited, status=1/FAILURE) Main PID: 1070 (code=exited, status=1/FAILURE) Feb 24 12:00:51 localhost systemd[1]: Starting auditd rules generation... Feb 24 12:00:56 localhost augenrules[1070]: /sbin/augenrules: No change Feb 24 12:00:56 localhost augenrules[1150]: Error sending add rule data request (Invalid argument) Feb 24 12:00:56 localhost augenrules[1150]: There was an error in line 5 of /etc/audit/audit.rules Feb 24 12:00:56 localhost augenrules[1150]: No rules Feb 24 12:00:56 localhost systemd[1]: augenrules.service: Main process exited, code=exited, status=1/FAILURE Feb 24 12:00:56 localhost systemd[1]: augenrules.service: Failed with result 'exit-code'. Feb 24 12:00:56 localhost systemd[1]: Failed to start auditd rules generation. /etc/audit/audit.rules consists of the following lines: ## This file is automatically generated from /etc/audit/rules.d -D -a task,never I am not sure if this issue is related specifically to armv7l architecture or not. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1196829 http://bugzilla.opensuse.org/show_bug.cgi?id=1196829#c5 Enzo Matsumiya <ematsumiya@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED Flags|needinfo? | --- Comment #5 from Enzo Matsumiya <ematsumiya@suse.com> --- I finally managed to reproduce this on a virtualized Leap JeOS 15.4 image (raspi2b). AFAICS the initial boot didn't present the problem by checking "journalctl -xeu auditd". Then I manually cleared the rules and tried "auditctl -a never,task", which failed as you mention. I'll be analysing this further now. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1196829 http://bugzilla.opensuse.org/show_bug.cgi?id=1196829#c7 --- Comment #7 from Enzo Matsumiya <ematsumiya@suse.com> --- (In reply to Fabian Vogt from comment #6)
Any news here? This still occurs reliably in openQA: https://openqa.opensuse.org/tests/2805231#next_previous
Yes, sorry for the very long delay. audit is not compiled with arm (32-bit) support for any codestream (it was very naive of me of not checking this first). I tried enabling it for 15.4 and some of the build dependencies are not provided for arm32 as well. I'm checking whether I'll need to pursue how to enable this or if we'll have to drop audit from arm32 platforms. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1196829 http://bugzilla.opensuse.org/show_bug.cgi?id=1196829#c8 --- Comment #8 from Enzo Matsumiya <ematsumiya@suse.com> --- (In reply to Enzo Matsumiya from comment #7)
I tried enabling it for 15.4 and some of the build dependencies are not provided for arm32 as well.
Just FTR, those are present in TW and 15.3, which is a bit puzzling to me. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1196829 http://bugzilla.opensuse.org/show_bug.cgi?id=1196829#c10 Enzo Matsumiya <ematsumiya@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(fvogt@suse.com) --- Comment #10 from Enzo Matsumiya <ematsumiya@suse.com> --- (In reply to Fabian Vogt from comment #9)
32bit ARM packages are provided by the "Step" project(s): https://build.opensuse.org/package/show/openSUSE:Step:15-SP4/audit
Thanks. Even building with --with-arm didn't work, so I'm debugging audit userspace to see if something is broken there, but it seems to me initially that the kernel doesn't have some of the required Kconfig options enabled. Meanwhile I want to know please: - is the kernel config the same as for openSUSE Leap or does this Step project also modifies it? - is armv7l the only arm 32-bit architecture that is supported or should I consider all the other variations as well? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1196829 http://bugzilla.opensuse.org/show_bug.cgi?id=1196829#c16 --- Comment #16 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1196829) was mentioned in https://build.opensuse.org/request/show/1036783 15.5:ARM:Images / JeOS -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1196829 http://bugzilla.opensuse.org/show_bug.cgi?id=1196829#c17 --- Comment #17 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1196829) was mentioned in https://build.opensuse.org/request/show/1036947 15.4:ARM:Images / JeOS -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com