From mboxrd@z Thu Jan 1 00:00:00 1970 From: Laurent Bigonville Subject: Inconsistencies between shipped initscript and .service file Date: Wed, 29 Jun 2016 17:48:46 +0200 Message-ID: <70d04f75-0f85-ff0e-5306-e4386fa6fc40@debian.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; Format="flowed" Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (ext-mx09.extmail.prod.ext.phx2.redhat.com [10.5.110.38]) by int-mx13.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u5TFnKxL021468 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Wed, 29 Jun 2016 11:49:20 -0400 Received: from anor.bigon.be (anor.bigon.be [91.121.173.99]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id CF501627F2 for ; Wed, 29 Jun 2016 15:49:18 +0000 (UTC) Received: from anor.bigon.be (localhost.localdomain [127.0.0.1]) by anor.bigon.be (Postfix) with ESMTP id 9A34B1A1A1 for ; Wed, 29 Jun 2016 17:49:16 +0200 (CEST) Received: from anor.bigon.be ([127.0.0.1]) by anor.bigon.be (anor.bigon.be [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id YsgqXJGpElKN for ; Wed, 29 Jun 2016 17:48:46 +0200 (CEST) Received: from [10.20.193.114] (unknown [193.53.238.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) (Authenticated sender: bigon) by anor.bigon.be (Postfix) with ESMTPSA id B5C601A19D for ; Wed, 29 Jun 2016 17:48:46 +0200 (CEST) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com Hi, I think there are inconsistencies between the behavior of the shipped LSB inistscript and the systemd .service. The sysconfig config file sets USE_AUGENRULES="no" and AUDITD_CLEAN_STOP="yes" while the .service file is actually doing the opposite. I guess that the sysconfig config should be modified (even if it's a quite minor issue)? Regards, Laurent Bigonville