mirror of
https://github.com/konstruktoid/hardening.git
synced 2026-04-25 16:55:53 +03:00
[GH-ISSUE #95] [QUESTION] VM rebooted during apt update #48
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @frederikbosch on GitHub (Jul 26, 2021).
Original GitHub issue: https://github.com/konstruktoid/hardening/issues/95
Originally assigned to: @konstruktoid on GitHub.
I have a hardened 18.04 machine, made more than a year ago @ commit
bd559d812c. Last week there were two security updates for systemd, and this caused my VMs to be rebooted. I believe it was the udev/libudev update that caused the reboot. But by what setting is getting triggered? My guess would be that is a auditd setting. Do you have any idea?@konstruktoid commented on GitHub (Jul 26, 2021):
Hi @frederikbosch
Did the host reboot or halt? It could be the audit configuration that triggers a halt when then disk gets full.
@frederikbosch commented on GitHub (Jul 26, 2021):
Hi @konstruktoid. Nope, it was the update of either udev or libudev that triggered the reboot. So I found out that udev is the device manager for the Linux kernel. Maybe updating the package causes the devices to be reloaded which is not allowed by the audit configuration?
@konstruktoid commented on GitHub (Jul 26, 2021):
The audit system could cause a halt if the log partition gets full.
Otherwise I would check the
needrestartconfiguration, but that shouldn't cause a reboot.Any pre-reboot logs or dmesg messages?
@github-actions[bot] commented on GitHub (Aug 26, 2021):
This issue is stale because it has been open 30 days with no activity, without any activity it will be closed in 5 days.