[Aide] libgcrypt error

[Chandana De Silva]

Hello All,

I am trying to run aide 0.13 on a Centos 5.2 server, and am getting this
error : libgcrypt version mismatch.

This seems to be from this change:
http://pkgs.fedoraproject.org/cgit/aide.git/diff/?id=af2e1397d3c3ba8cf65699ce2ac0205f7995b944

Checking the aide RPM and the libgcrypt RPM, things seem to match.

Can someone help me, please ?

Thanks and regards
Chandana

rpm -qR aide
config(aide) = 0.13.1-6.el5_8.2
libacl.so.1()(64bit)
libacl.so.1(ACL_1.0)(64bit)
libattr.so.1()(64bit)
libattr.so.1(ATTR_1.0)(64bit)
libaudit.so.0()(64bit)
libc.so.6()(64bit)
libc.so.6(GLIBC_2.2.5)(64bit)
libc.so.6(GLIBC_2.3)(64bit)
libc.so.6(GLIBC_2.3.4)(64bit)
libc.so.6(GLIBC_2.4)(64bit)
libcrypt.so.1()(64bit)
libgcrypt.so.11()(64bit)
libgcrypt.so.11(GCRYPT_1.2)(64bit)
libgpg-error.so.0()(64bit)
libm.so.6()(64bit)
libm.so.6(GLIBC_2.2.5)(64bit)
libselinux.so.1()(64bit)
libz.so.1()(64bit)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rtld(GNU_HASH)

The libgcrypt RPM

rpm -qa | grep gcrypt
libgcrypt-1.2.3-1
libgcrypt-devel-1.2.3-1
rpm -ql libgcrypt-1.2.3-1
/usr/lib64/libgcrypt.so.11
/usr/lib64/libgcrypt.so.11.2.2
/usr/lib/libgcrypt.so.11
/usr/lib/libgcrypt.so.11.2.2

[Keith Constable]

Post by Chandana De Silva
Hello All,
I am trying to run aide 0.13 on a Centos 5.2 server, and am getting this
error : libgcrypt version mismatch.
http://pkgs.fedoraproject.org/cgit/aide.git/diff/?id=af2e1397d3c3ba8cf65699ce2ac0205f7995b944
Checking the aide RPM and the libgcrypt RPM, things seem to match.
Can someone help me, please ?
Thanks and regards
Chandana

Chandana,

I apologize in advance, as my advice is probably not what you are looking for.

That old CentOS build of aide is compiled as a dynamic binary. According to the aide documentation, this is not recommended [1]. Building aide this way decreases the security offered by aide, as the linked libraries then become an attack vector.

I highly recommend compiling your own aide binary and using that, rather than one packaged in 2007.

Best regards,

Keith Constable

[1] http://aide.git.sourceforge.net/git/gitweb.cgi?p=aide/aide;a=blob;f=README;hb=HEAD



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4352 bytes
Desc: not available
Url : https://mailman.cs.tut.fi/pipermail/aide/attachments/20121026/7ffb49ba/attachment.bin