Bug 28647 - problem to start tomoyo-auditd.service because of wrong configuration (fix given)
Summary: problem to start tomoyo-auditd.service because of wrong configuration (fix gi...
Status: NEW
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: All Packagers
QA Contact:
URL:
Whiteboard: MGA7TOO
Keywords:
Depends on:
Blocks:
 
Reported: 2021-03-26 10:02 CET by eric gerbier
Modified: 2021-03-29 09:26 CEST (History)
1 user (show)

See Also:
Source RPM: tomoyo-tools-2.5.0-10.mga8.src.rpm
CVE:
Status comment:


Attachments

Description eric gerbier 2021-03-26 10:02:22 CET
Description of problem:
with the default config, the tomoyo-auditd.service do not start :

● tomoyo-auditd.service - LSB: TOMOYO Linux MAC logging daemon
     Loaded: loaded (/etc/rc.d/init.d/tomoyo-auditd; generated)
     Active: failed (Result: exit-code) since Tue 2021-03-23 08:21:57 CET; 3 days ago
       Docs: man:systemd-sysv-generator(8)
    Process: 876 ExecStart=/etc/rc.d/init.d/tomoyo-auditd start (code=exited, status=1/FAILURE)
        CPU: 24ms

mars 23 08:21:56 hvrenat3 systemd[1]: Starting LSB: TOMOYO Linux MAC logging daemon...
mars 23 08:21:57 hvrenat3 tomoyo-auditd[876]: Lancement de ccs-auditd :
mars 23 08:21:57 hvrenat3 tomoyo-auditd[905]: tomoyo-auditd [remote_ip:remote_port]
mars 23 08:21:57 hvrenat3 tomoyo-auditd[905]:   See /etc/tomoyo/tools/auditd.conf for configuration.
mars 23 08:21:57 hvrenat3 tomoyo-auditd[876]: [ÉCHEC ]
mars 23 08:21:57 hvrenat3 systemd[1]: tomoyo-auditd.service: Control process exited, code=exited, status=1/FAILURE
mars 23 08:21:57 hvrenat3 systemd[1]: tomoyo-auditd.service: Failed with result 'exit-code'.
mars 23 08:21:57 hvrenat3 systemd[1]: Failed to start LSB: TOMOYO Linux MAC logging daemon.

with the following patch (change OPTIONS variable), it is ok
--- /etc/init.d/tomoyo-auditd.sav	2021-03-26 09:57:51.053972517 +0100
+++ /etc/init.d/tomoyo-auditd	2021-03-26 09:54:17.128307045 +0100
@@ -12,7 +12,8 @@
 
 # Configuration variables
 NAME="ccs-auditd"
-OPTIONS="/dev/null /var/log/tomoyo/reject_log.conf"
+#OPTIONS="/dev/null /var/log/tomoyo/reject_log.conf"
+OPTIONS=""
 LOCKFILE=/var/lock/subsys/tomoyo-auditd
 
 umask 077



Version-Release number of selected component (if applicable):
the problem is also in mageia 7, and probably in mageia 6

How reproducible:
every time

Steps to Reproduce:
1. urpmi tomoyo-tools
2. configure grub for tomoyo and reboot
3. systemctl start tomoyo-auditd.service
4. systemctl status tomoyo-auditd.service
Comment 1 Lewis Smith 2021-03-26 22:36:48 CET
Thank you for the report and the remedy.

Unsure which file the edit applies to. For M8:
/etc/rc.d/init.d/tomoyo-auditd is provided by 'tomoyo-tools'.
/etc/init.d/tomoyo-auditd is not found by urpmf.
/etc/tomoyo/tools/auditd.conf is not found by urpmf.

This SRPM has no registered maintainer, and is done by various people; so assigning this globally.

Assignee: bugsquad => pkg-bugs
Summary: problem to start tomoyo-auditd.service => problem to start tomoyo-auditd.service because of wrong configuration (fix given)
Whiteboard: (none) => MGA7TOO

Comment 2 Dave Hodgins 2021-03-27 02:20:49 CET
# strings /usr/lib64/tomoyo/init_policy|grep  -e /etc/init.d -e /etc/tomoyo
/etc/tomoyo
/etc/init.d/
/etc/init.d/boot.d
rewrite tail_pattern /etc/tomoyo/policy/\*/domain_policy.conf
rewrite tail_pattern /etc/tomoyo/policy/\*/exception_policy.conf
rewrite tail_pattern /etc/tomoyo/policy/\*/manager.conf
rewrite tail_pattern /etc/tomoyo/policy/\*/profile.conf
rewrite tail_pattern /etc/tomoyo/policy/\*/

Those files are generated when the program is run.

The Description applies to /etc/rc.d/init.d/tomoyo-auditd in the package.

CC: (none) => davidwhodgins

Comment 3 eric gerbier 2021-03-29 09:26:35 CEST
on my system :
[root@sxrenat2 ~]# rpm -qf /etc/init.d/tomoyo-auditd 
tomoyo-tools-2.5.0-10.mga8

Note You need to log in before you can comment on or make changes to this bug.