On Sun, Mar 05, 2023 at 04:00:26PM +0100, Guillem Jover wrote: > Package: aide > Version: 0.18-2 > Severity: serious
Justification? > This specific system is using sysvinit. Checking the postinst I notice > it is conditionally using systemd-sysusers if available, but then > unconditionally tries to chown files and does not fail if it cannot > perform the operation. Yes, that is expected, please see /usr/share/doc/aide-common/README.Debian.gz and consider sending a tested patch. > So ideally this would get adduser support, and depend on either that > or systemd-standalone-sysusers. It is my intention to have aide degrade gracefully to using root on non-systemd systems, since non-systemd users obviously dont care much about security. Greetings Marc
