Project

General

Profile

Bug #6771

Unexpected status for fileAlterationMonitoring

Added by Alexis MOUSSET over 5 years ago. Updated over 5 years ago.

Status:
Released
Priority:
N/A
Assignee:
Matthieu CERDA
Category:
Techniques
Target version:
Severity:
User visibility:
Effort required:
Priority:

Description

The associated message is:

The content of /etc is INCONSISTENT: Either the file has changed or one of the elements in the directory has
The content of /etc is consistent

Agent logs:

2015-06-18T11:27:50+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Hash 'md5' for '/etc/adjtime' changed!
2015-06-18T11:27:50+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Updating md5 hash for '/etc/adjtime' (MD5=1039028dc8bc5ae7750cc2dcc360b6a3)
2015-06-18T11:27:50+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Hash 'sha1' for '/etc/adjtime' changed!
2015-06-18T11:27:50+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Updating sha1 hash for '/etc/adjtime' (SHA=cd1005f8ae908763e150f6b7606b34459ad944a3)
2015-06-18T11:27:50+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Last modified time for '/etc/adjtime' changed 'Thu Jun 18 11:23:58 2015' -> 'Thu Jun 18 11:27:48 2015'
R: @@fileAlterationMonitoring@@result_success@@32377fd7-02fd-43d0-aab7-28460a91347b@@045497e6-3396-4e6c-90ad-bd1c765a1ab5@@11@@File or directory to monitor@@/etc@@2015-06-18 09:27:44+00:00##root@#The content of /etc is consistent
R: @@fileAlterationMonitoring@@result_repaired@@32377fd7-02fd-43d0-aab7-28460a91347b@@045497e6-3396-4e6c-90ad-bd1c765a1ab5@@11@@File or directory to monitor@@/etc@@2015-06-18 09:27:44+00:00##root@#The content of /etc is INCONSISTENT: Either the file has changed or one of the elements in the directory has

Files

etc.log (1.63 MB) etc.log verbose agent log Alexis MOUSSET, 2015-06-18 11:31
#1

Updated by Alexis MOUSSET over 5 years ago

#2

Updated by Alexis MOUSSET over 5 years ago

  • Status changed from New to In progress
  • Assignee set to Alexis MOUSSET
  • Target version set to 2.10.15

When monitoring a directory, if some elements have changed and some not, the agent defines both kept and changed classes, will lead to unexpected reporting.

2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Additional promise info: source path '/var/rudder/cfengine-community/inputs/fileAlterationMonitoring/2.0/fileAlterationMonitoring.cf' at line 44
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: File permissions on '/etc/group' as promised
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Defining promise result class '1_kept'
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Handling file existence constraints on '/etc/adjtime'
2015-06-18T11:24:01+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Hash 'md5' for '/etc/adjtime' changed!
2015-06-18T11:24:01+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Updating md5 hash for '/etc/adjtime' (MD5=45f80cfabff04311f7883f6f18279b37)
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Additional promise info: source path '/var/rudder/cfengine-community/inputs/fileAlterationMonitoring/2.0/fileAlterationMonitoring.cf' at line 44
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Defining promise result class '1_changed'
2015-06-18T11:24:01+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Hash 'sha1' for '/etc/adjtime' changed!
2015-06-18T11:24:01+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Updating sha1 hash for '/etc/adjtime' (SHA=3b9c9c256265bfc8ff6dedcf1aa825de1d5fac3f)
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Additional promise info: source path '/var/rudder/cfengine-community/inputs/fileAlterationMonitoring/2.0/fileAlterationMonitoring.cf' at line 44
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Defining promise result class '1_changed'
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Updating persistent class 'checksum_alerts'
2015-06-18T11:24:01+0200   notice: /default/file_alteration_monitor/files/'/etc'[0]: Last modified time for '/etc/adjtime' changed 'Thu Jun 18 11:23:15 2015' -> 'Thu Jun 18 11:23:58 2015'
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Additional promise info: source path '/var/rudder/cfengine-community/inputs/fileAlterationMonitoring/2.0/fileAlterationMonitoring.cf' at line 44
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: File permissions on '/etc/adjtime' as promised
2015-06-18T11:24:01+0200  verbose: /default/file_alteration_monitor/files/'/etc'[0]: Defining promise result class '1_kept'

The problem appears on 1.0 and 2.0 versions of the technique.

#3

Updated by Alexis MOUSSET over 5 years ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Alexis MOUSSET to Matthieu CERDA
  • Pull Request set to https://github.com/Normation/rudder-techniques/pull/700
#4

Updated by Alexis MOUSSET over 5 years ago

  • Status changed from Pending technical review to Pending release
  • % Done changed from 0 to 100
#5

Updated by Matthieu CERDA over 5 years ago

#6

Updated by Vincent MEMBRÉ over 5 years ago

This bug has been fixed in Rudder 2.10.15, 2.11.12, 3.0.7 and 3.1.0 which were released today.

#7

Updated by Vincent MEMBRÉ over 5 years ago

  • Status changed from Pending release to Released

Also available in: Atom PDF