[Bug 1227908] auditd obsolete built-in options
https://bugzilla.suse.com/show_bug.cgi?id=1227908 https://bugzilla.suse.com/show_bug.cgi?id=1227908#c8 Fabian Vogt <fvogt@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo? | CC| |fvogt@suse.com --- Comment #8 from Fabian Vogt <fvogt@suse.com> --- FWICT this was introduced by https://github.com/linux-audit/audit-userspace/commit/d1ccd8f642e11ad65cdc8c..., which added a log entry with "auid=42". This is something for upstream to figure out how to fix IMO. I see several options: a) Remove the gdm part again b) Use some uid that doesn't exist and hardcode unknown(123456) c) Start auparse in a test mode that ignores the host system and maps 42 to gdm. Downstream this could be hacked around using a patch that does s/gdm/unknown(42)/. That would work in OBS, but if someone builds that locally (sholudn't be that common) it would fail in the case that 42 is assigned to something. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com