From mboxrd@z Thu Jan  1 00:00:00 1970
From: Laurent Bigonville <bigon@debian.org>
Subject: Rational behind RefuseManualStop=yes in auditd.service
Date: Tue, 30 Jul 2013 22:04:46 +0200
Message-ID: <20130730220446.0dced4f5@fornost.bigon.be>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx1.redhat.com (ext-mx13.extmail.prod.ext.phx2.redhat.com
	[10.5.110.18])
	by int-mx11.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP
	id r6UK4wAm016555
	for <linux-audit@redhat.com>; Tue, 30 Jul 2013 16:04:58 -0400
Received: from anor.bigon.be (anor.bigon.be [91.121.173.99])
	by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id r6UK4uuO007115
	for <linux-audit@redhat.com>; Tue, 30 Jul 2013 16:04:57 -0400
Received: from anor.bigon.be (localhost.localdomain [127.0.0.1])
	by anor.bigon.be (Postfix) with ESMTP id AA91A1A056
	for <linux-audit@redhat.com>; Tue, 30 Jul 2013 22:04:54 +0200 (CEST)
Received: from anor.bigon.be ([127.0.0.1])
	by anor.bigon.be (anor.bigon.be [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id Al10XIP0ceml for <linux-audit@redhat.com>;
	Tue, 30 Jul 2013 22:04:52 +0200 (CEST)
Received: from fornost.bigon.be (unknown
	[IPv6:2a02:578:85fc:1:226:18ff:fe08:6073])
	(using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits))
	(Client did not present a certificate) (Authenticated sender: bigon)
	by anor.bigon.be (Postfix) with ESMTPSA id 5D42E1A02C
	for <linux-audit@redhat.com>; Tue, 30 Jul 2013 22:04:52 +0200 (CEST)
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

Hi,

I would like to know the rational behind RefuseManualStop=yes in
auditd.service file.

I'm currently looking at upgrading the audit package in debian and
RefuseManualStop=yes is preventing the daemon to be restarted during
upgrade.

Looking at systemd.unit(5) manpage, I don't have the feeling that it
should be used in this case.

As a side note, it seems that the *.spec file is stopping the daemon in
the %preun so this could fail I guess?

Any thoughts on this?

Laurent Bigonville