keel-overlay-coraza-logrotate.timer is enabled on install #45

Open
opened 2026-10-07 21:11:32 -03:00 by marcos-mendez · 0 comments
marcos-mendez commented 2026-10-07 21:11:32 -03:00 (Migrated from github.com)

Found 2026-10-08 auditing overlays for the was-enabled pitfall (common#44): keel-overlay-coraza-logrotate.timer has WantedBy=timers.target, is installed with plain dh_installsystemd and has no preset, so it is enabled on first install, unlike every other overlay unit. Harmless (it skips when there is no audit log), but inconsistent: overlays ship off and keel enables what the manifest names. Install with --no-enable and add a preset, or make it static and pulled in by the coraza unit, with the same install test as keel-overlay-vip.

Found 2026-10-08 auditing overlays for the was-enabled pitfall (common#44): keel-overlay-coraza-logrotate.timer has WantedBy=timers.target, is installed with plain dh_installsystemd and has no preset, so it is enabled on first install, unlike every other overlay unit. Harmless (it skips when there is no audit log), but inconsistent: overlays ship off and keel enables what the manifest names. Install with --no-enable and add a preset, or make it static and pulled in by the coraza unit, with the same install test as keel-overlay-vip.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Keel-Linux/common#45
No description provided.