Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Require acl package. Fix logrotate and auditd #160

Merged
merged 4 commits into from
Dec 21, 2022

Conversation

jewnix
Copy link
Collaborator

@jewnix jewnix commented Dec 11, 2022

The Check for existing /opt/splunkforwarder/etc/passwd fails if the acl package is not installed. Observed on Debian servers with minimal installation.

The prereqs.yml can be used in the future to install packages required for the basic installation operation, even if install_utilities is set to false.

@jewnix
Copy link
Collaborator Author

jewnix commented Dec 14, 2022

  • The acl package is required for some tasks that set permissions.
  • Logrotate script fails on Ubuntu/Debain hosts, because the logrotate file differs from the ones on RHEL based hosts.
  • Using condrestart for auditd on RHEL, still results in it hanging. stop and start is required according to this article (sorry for the paywall).

@dtwersky dtwersky changed the title Require acl package for setting permissions Require acl package. Fix logrotate Dec 14, 2022
@dtwersky dtwersky changed the title Require acl package. Fix logrotate Require acl package. Fix logrotate and auditd Dec 14, 2022
This was referenced Dec 14, 2022
@dtwersky dtwersky merged commit b8ed688 into splunk:master Dec 21, 2022
@jewnix jewnix deleted the add_required_packages branch February 9, 2023 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants