[Bug 1231236] New: Lastest audit package (audit-rules to be more specific) is not installable in containers
https://bugzilla.suse.com/show_bug.cgi?id=1231236 Bug ID: 1231236 Summary: Lastest audit package (audit-rules to be more specific) is not installable in containers Classification: openSUSE Product: openSUSE Tumbleweed Version: Slowroll Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs@suse.de Reporter: dcassany@suse.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- Since the last audit update this package (audit-rules to be more specific) is no longer installable in containers without getting a 107 error from zypper. The post transaction scriptlet fails and it makes it hard be installed as part of a Dockerfile. Reproducer: $ podman run --rm -ti opensuse/tumbleweed:latest # inside the contianer $ zypper in -y awk audit 'awk' package needs to be installed too. To my surprise without it `/sbin/augenrules` fails (so probably this should be a requirement of audit-rules) but this does not cause zypper to report any error. However if 'awk' is in the system it causes a failure in `audit-rules` post transaction scriptlet. /var/log/zypp/history installing in a container without awk (zypper returns 0): # 2024-10-02 08:47:03 audit-rules-4.0-1.1.x86_64.rpm installed ok # Additional rpm output: # /sbin/augenrules: line 100: awk: command not found # /var/log/zypp/history installing in a container without awk (zypper returns 107): # 2024-10-02 08:50:34 audit-rules-4.0-1.1.x86_64.rpm installed ok # Additional rpm output: # warning: %post(audit-rules-4.0-1.1.x86_64) scriptlet failed, exit status 1 # I think the audit-rules script should have additional logic to prevent this 107 errors to happen in containers (and probably in other contexts too) and maybe there is a dependency missing to awk in audit-rules package. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1231236 David Cassany <dcassany@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ematsumiya@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1231236 https://bugzilla.suse.com/show_bug.cgi?id=1231236#c2 David Cassany <dcassany@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(dcassany@suse.com | |) | --- Comment #2 from David Cassany <dcassany@suse.com> --- (In reply to Enzo Matsumiya from comment #1)
@David thanks for the report.
I've commited some changes to https://build.opensuse.org/package/show/home:ematsumiya:branches:security/ audit
I was able to confirm that 'zypper in -y audit' now installs without errors on a TW container.
I'd appreciate if you could test it before I submit to factory. Thanks.
Thanks Enzo for such a quick response. I checked your patched packages and it works fine in our environment. All good! -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com