diff --git a/EGG_VERSION b/EGG_VERSION index 25e20c9a..9c593e20 100644 --- a/EGG_VERSION +++ b/EGG_VERSION @@ -1 +1 @@ -v2024-05-27-0926 \ No newline at end of file +v2024-07-22-2350 \ No newline at end of file diff --git a/data/.fallback.json b/data/.fallback.json index a73949fd..a6e68c68 100644 --- a/data/.fallback.json +++ b/data/.fallback.json @@ -169,12 +169,10 @@ "BIOS Hyper-V UEFI Release", "Brought up ", "CIFS VFS: protocol revalidation - security settings mismatch", - "CSUM", "CVE-2017-1000364", "CVE-2018-14634", "Dazed and confused, but trying to continue", "Device is ineligible for IOMMU domain attach due to platform RMRR requirement", - "Dropping TSO", "EDAC ", "Emulex OneConnect OCe10100, FCoE Initiator", "FEATURE IBPB_SUPPORT", @@ -211,7 +209,6 @@ "l1tf", "mce: ", "migration_entry_wait_on_locked", - "netconsole: network logging started", "nfsd: too many open connections, consider increasing the number of threads", "page allocation failure: order:", "resetting", @@ -317,6 +314,11 @@ "pre_command": "iface", "symbolic_name": "ethtool_k" }, + { + "command": "/opt/CrowdStrike/falconctl -g --aid", + "pattern": [], + "symbolic_name": "falconctl_aid" + }, { "command": "/opt/CrowdStrike/falconctl -g --backend", "pattern": [], @@ -327,6 +329,11 @@ "pattern": [], "symbolic_name": "falconctl_rfm" }, + { + "command": "/opt/CrowdStrike/falconctl -g --version", + "pattern": [], + "symbolic_name": "falconctl_version" + }, { "command": "/usr/sbin/fcoeadm -i", "pattern": [], @@ -1000,6 +1007,11 @@ "pattern": [], "symbolic_name": "pcs_status" }, + { + "command": "/usr/bin/pidstat", + "pattern": [], + "symbolic_name": "pidstat" + }, { "command": "/usr/bin/pmrep -t 1s -T 1s network.interface.out.packets network.interface.collisions swap.pagesout mssql.memory_manager.stolen_server_memory mssql.memory_manager.total_server_memory -o csv", "pattern": [], @@ -1065,11 +1077,8 @@ "dlm_controld", "dnsmasq", "docker-runc-current", - "elasticsearch", "gnocchi-metricd", "gnome-shell", - "gunicorn", - "haproxy", "heat-engine", "histserver", "httpd", @@ -1127,7 +1136,6 @@ "/usr/bin/openshift start node", "/usr/bin/teamd", "COMMAND", - "STAP/8.2", "SystemPerformance", "abrtd", "auditd", @@ -1146,11 +1154,8 @@ "diagxps", "dlm_controld", "docker-runc-current", - "elasticsearch", "gnocchi-metricd", "gnome-shell", - "gunicorn", - "haproxy", "heat-engine", "histserver", "httpd", @@ -1165,7 +1170,6 @@ "nova-compute", "nova-conductor", "ntpd", - "oc observe csr", "octavia-worker", "openshift start master api", "openshift start master controllers", @@ -1208,7 +1212,6 @@ "command": "/bin/ps auxww", "pattern": [ "/opt/perf/bin/midaemon", - "/sbin/multipathd", "/sbin/rngd", "/usr/bin/openshift start master", "/usr/bin/openshift start node", @@ -1233,13 +1236,10 @@ "diagxps", "dlm_controld", "docker-runc-current", - "elasticsearch", "gnocchi-metricd", "gnome-shell", "goferd", "greenplum", - "gunicorn", - "haproxy", "heat-engine", "histserver", "httpd", @@ -1317,11 +1317,8 @@ "diagxps", "dlm_controld", "docker-runc-current", - "elasticsearch", "gnocchi-metricd", "gnome-shell", - "gunicorn", - "haproxy", "heat-engine", "histserver", "httpd", @@ -1481,10 +1478,18 @@ { "command": "/usr/bin/find /etc/pki/product-default/ /etc/pki/product/ -name '*pem' -exec rct cat-cert --no-content '{}' \\;", "pattern": [ - "ID:" + "ID:", + "Path:", + "Product Certificate", + "Tags:" ], "symbolic_name": "subscription_manager_installed_product_ids" }, + { + "command": "/usr/sbin/subscription-manager status", + "pattern": [], + "symbolic_name": "subscription_manager_status" + }, { "command": "/bin/ls -lH /etc/ssh/sshd_config", "pattern": [], @@ -1746,6 +1751,11 @@ ], "symbolic_name": "insights_client_conf" }, + { + "file": "/etc/pam.d/login", + "pattern": [], + "symbolic_name": "login_pam_conf" + }, { "file": "/etc/redhat-access-insights/machine-id", "pattern": [], @@ -1773,6 +1783,11 @@ "pattern": [], "symbolic_name": "cloud_init_custom_network" }, + { + "file": "/run/cloud-init/cloud.cfg", + "pattern": [], + "symbolic_name": "cloud_init_cfg_run" + }, { "file": "/var/log/cloud-init.log", "pattern": [ @@ -1855,6 +1870,13 @@ "pattern": [], "symbolic_name": "cib_xml" }, + { + "file": "/proc/fs/cifs/DebugData", + "pattern": [ + "DFS origin" + ], + "symbolic_name": "cifs_debug_data" + }, { "file": "/etc/cinder/cinder.conf", "pattern": [], @@ -1970,11 +1992,6 @@ "pattern": [], "symbolic_name": "cups_files_conf" }, - { - "file": "/etc/cups/ppd/()*", - "pattern": [], - "symbolic_name": "cups_ppd" - }, { "file": "/sys/kernel/debug/x86/retp_enabled", "pattern": [], @@ -2047,7 +2064,6 @@ { "file": "/etc/etcd/etcd.conf", "pattern": [ - "ETCD_DATA_DIR", "[" ], "symbolic_name": "etcd_conf" @@ -2358,7 +2374,6 @@ "/input/input", "/usr/lib/ocf/resource.d/heartbeat/azure-lb: line 91: kill: Binary: arguments must be process or job IDs", "17763", - ": segfault at ", "> audit_backlog_limit=", "Abort command issued", "Audit daemon is suspending logging due to logfile size", @@ -2382,10 +2397,8 @@ "High mssql stolen node memory", "Hyper-V Host", "Hyper-V Host Build:", - "List /apis/image.openshift.io/v1/images", "Loop callback failed with: Cannot allocate memory", "Low random number entropy available", - "MDC/MDIO access timeout", "Medium access timeout failure. Offlining disk!", "NETDEV WATCHDOG", "Neighbour table overflow", @@ -2420,7 +2433,6 @@ "audispd: queue is full - dropping events", "audit: kauditd hold queue overflow", "blocked FC remote port time out: removing target and saving binding", - "callbacks suppressed", "canceled DHCP transaction, DHCP client pid", "clearing Tx timestamp hang", "device-mapper: multipath: Failing path", @@ -2429,15 +2441,10 @@ "drivers/input/input-leds.c:115 input_leds_connect", "enabling it in", "end_request: I/O error, dev", - "eviction manager: must evict pod(s) to reclaim nodefsInodes", - "ext4_ext_search_left", - "failed while handling", "failed with error -110", "failed: Device or resource busy", "failed: Invalid argument", - "fiid_obj_get: 'present_countdown_value': data not available", "firewalld - dynamic firewall daemon", - "from image service failed: rpc error: code = Canceled desc = context canceled", "host not found in upstream", "hv_netvsc vmbus_", "hv_netvsc: probe of vmbus_", @@ -2445,7 +2452,6 @@ "ill process ", "imjournal: fopen() failed for path: '/var/lib/rsyslog/imjournal.state.tmp': Permission denied", "imjournal: open on state file `/var/lib/rsyslog/imjournal.state' failed", - "in libnl.so.1", "initiating reset due to tx timeout", "invalid key/value pair in file /usr/lib/udev/rules.d/59-fc-wwpn-id.rules", "irq handler for vector (irq -1)", @@ -2454,19 +2460,13 @@ "is marked executable.", "is marked world-writable.", "iscsiadm: iscsiadm: Could not log into all portals", - "kernel: BUG: soft lockup", - "kernel: CIFS VFS: Unexpected SMB signature", "kernel: INFO: task xfsaild/md", "kernel: Linux version", - "kernel: Memory cgroup out of memory: Kill process", "kernel: TCP: out of memory -- consider tuning tcp_mem", "kernel: bnx2fc: byte_count", - "kernel: lockd: Unknown symbol register_inet6addr_notifier", - "kernel: lockd: Unknown symbol unregister_inet6addr_notifier", "kernel: megaraid_sas: FW detected to be in faultstate, restarting it", "kernel: megasas: Found FW in FAULT state, will reset adapter.", "kernel: nfs: server", - "khash_super_prune_nolock", "link status up for interface", "migration_entry_wait_on_locked", "multipathd.service operation timed out. Terminating", @@ -2475,36 +2475,28 @@ "not responding, timed out", "per_source_limit from", "platform microcode: firmware: requesting", - "quorum using qdevice is distrusted for SBD as qdevice-sync_timeout", "rejecting connections on daemon MTA: load average", "reservation conflict", "returned a bad sequence-id error", - "rhsm", "rhsmd: rhsmd process exceeded runtime and was killed", "rsyslogd: too many tcp sessions", "scope: Connection timed out", "shm_open failed, Permission denied", "shutting down the system because of error 1", - "skb_copy", "smb2_reconnect.part.0+0x", "socket error sending to node", "start request repeated too quickly for docker.service", "state changed timeout -> done", - "swapper: page allocation failure", "systemd: Reloading.", "systemd[1]: Reloading.", - "tg3_start_xmit", "timed out", "timeout before we got a set response", "timing out command, waited", "transmit queue", - "udev: renamed network interface", "unable to create worker thread", "unknown filesystem type 'binfmt_misc'", "ut of memory: ", - "warning: inquisitor_child: Latency: No liveness for", "was not terminated (reboot) by on behalf of", - "watch chan error: etcdserver: mvcc: required revision has been compacted", "watchdog: BUG: soft lockup", "watchdog: BUG: soft lockup - CPU" ], @@ -2881,22 +2873,31 @@ "file": "/etc/rsyslog.conf", "pattern": [ "$ActionQueueFileName", + "$IncludeConfig", "$ModLoad imjournal", "(", ")", "/var/log/messages", "/var/log/secure", + "@@", + "ActionQueueFileName", + "ActionResumeRetryCount", "DefaultNetstreamDriver", "InputTCPMaxSessions", "MaxOpenFiles", "MaxSessions", "OmitLocalLogging", + "Protocol", "StreamDriver", "SysSock.Use=\"off\"", "SystemLogSocketName", + "Target", + "action.resumeRetryCount", "imjournal", + "imuxsock", "load=\"imjournal\"", - "load=\"imuxsock\"", + "queue.filename", + "type", "{", "}" ], @@ -2996,6 +2997,11 @@ ], "symbolic_name": "secure" }, + { + "file": "/etc/securetty", + "pattern": [], + "symbolic_name": "securetty" + }, { "file": "/etc/selinux/config", "pattern": [], @@ -3169,6 +3175,11 @@ "pattern": [], "symbolic_name": "sysconfig_oracleasm" }, + { + "file": "/etc/sysconfig/pcsd", + "pattern": [], + "symbolic_name": "sysconfig_pcsd" + }, { "file": "/etc/sysconfig/prelink", "pattern": [], @@ -3234,6 +3245,11 @@ "pattern": [], "symbolic_name": "tmpfilesd" }, + { + "file": "/sys/class/tty/console/active", + "pattern": [], + "symbolic_name": "tty_console_active" + }, { "file": "/etc/sysconfig/rhn/up2date", "pattern": [], @@ -3639,22 +3655,31 @@ "glob": "/etc/rsyslog.d/*.conf", "pattern": [ "$ActionQueueFileName", + "$IncludeConfig", "$ModLoad imjournal", "(", ")", "/var/log/messages", "/var/log/secure", + "@@", + "ActionQueueFileName", + "ActionResumeRetryCount", "DefaultNetstreamDriver", "InputTCPMaxSessions", "MaxOpenFiles", "MaxSessions", "OmitLocalLogging", + "Protocol", "StreamDriver", "SysSock.Use=\"off\"", "SystemLogSocketName", + "Target", + "action.resumeRetryCount", "imjournal", + "imuxsock", "load=\"imjournal\"", - "load=\"imuxsock\"", + "queue.filename", + "type", "{", "}" ], @@ -3737,6 +3762,7 @@ "Ciphers", "INCLUDE", "Include", + "KexAlgorithms", "MACS", "MACs", "Macs", @@ -3766,5 +3792,5 @@ "pre_commands": { "iface": "/sbin/ip -o link | awk -F ': |@' '/.*link\\/ether/ {print $2}'" }, - "version": "2024-05-23T08:13:20.220663" + "version": "2024-07-18T09:40:42.628834" } \ No newline at end of file diff --git a/data/.fallback.json.asc b/data/.fallback.json.asc index 5b747728..7b352bb4 100644 --- a/data/.fallback.json.asc +++ b/data/.fallback.json.asc @@ -1,17 +1,17 @@ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 -iQIcBAABCAAGBQJmTxjwAAoJEHUU932DZrDZOyMP/RIN1uWkQVYE3let4zAMs/J2 -ucCYIXx6inAtUdIZbhz+7o/mUwpKmbRdnHS1SQuEUQWVcMFHAHh2DMj0ONstcIVQ -87PU5DP1PLElcz2S/mlEq5g6WGO7GuSYe1CRW0LH3O9zatwTET9FBPGtrl8HsU7f -80Wd0xzKzbS34TUEJOAPEiGVFiXtmS/GHCClFx5TEHjapD7a5ZwkeVzrD2mHhzG4 -dNF6JX6q3IfqYhsIVLRLnpicKP9FaSylKpVYuy3d8MjT7T4Bjnbu8Xu3N7CQnIHM -7pMsY/x+orOAz5eW4twcsTMt/mDPeRQPRc5K6i6f5/qfeCUVsnok1oykDNU/DYzY -Uk8sdNOd5pB1YkGILSF9012PRV13YZdYM7uHzGBo9IFJc9UNXQ3/SWZdKPlOvBaP -R7aqmp8/QhkjxN4trq26lKIBtaUeAGtDrY4Zz2qqNwBz7FvMdpJvOso7FHGAIyz3 -WGfbdywRsb+8hY6DH/6L2XPYKekQbUU8kfZCDfIhCE6Nh/nI+HvpYZcOEMUJfO4U -Ar0okjAqt0wUHuEMKUVgdsaShfWaHNeYlFO0YJ7GdiA+LsFqBs5qYaNPcnUs/QP7 -uUoq4Kw6s8Gm8pv/ob3MWF0+czOt/7mQhhe7te7y7jWYzAdxSbRmJkFR8blzdiWA -wMjVEw3sTLPQ3yBVdW4q -=l/NQ +iQIcBAABCAAGBQJmmT4jAAoJEHUU932DZrDZeMAQAKsysk4klakVpCDbWrgRjry5 +xpcIaoFcZTfuCwLjdnOVUCrNjr1XsGSVWJlyitWFMAz1fefzpQA672cZ7K6KxQzi +d+hUpG71YVgvHLKJNIk9cYbyLTNnIftW3zQxWbNHW1j+FuZEfwBXgbCgyg70oyTK +NihDbqE11BmhZEfv/MNYzYSWuoPvl2XIgyiDTIYMaBOwQom9R6NV/maYkH63M66m +jgl3VNjrE7k28HN0Zony0+Bya10EoW4LPzLlOQoQU4xguyLThCP0Lr7IuPvjfpUE +t9IK8AcWvWKNf8AtH3T3tA8HWxEjxrivehkB1Plw7Qs5ysvG7sP8aBVCBDyr8gXB +0HJhMt0wkAp/YMatAFte+pfpks3TZGlBratqCwN1vQ4wmtSBD9G2InDtx5WRGJeP +lvqww1Y/DnUUKo9agifJAm0mfopcfvNOSGpK/+JlmiB2wk+d290nFSAzeL6hK8E+ +yhEkyvQE3HhiMU2QBamxV5Z59scgj6O3eesGChEA1gUnJapkAXv0uq6E+fsQIecY +v05/TDtizmwqBbRCDbtj9/Ts1vNQE38Rt9DIUgnup8OYWPkH8h1OWNB6/+P2spp3 +Z7sAWnOIJdDGzwhJ4k+UzbYxBdML8Q0lT9mPAysAQ2TYbj5hP6BkYR4sNGsmir4L +Un0Q0duJ3Pj+t5OufEAM +=k/ZP -----END PGP SIGNATURE----- diff --git a/data/rpm.egg b/data/rpm.egg index 2da7fda7..bc13a1e1 100644 Binary files a/data/rpm.egg and b/data/rpm.egg differ diff --git a/data/rpm.egg.asc b/data/rpm.egg.asc index f76c50ed..677e6296 100644 --- a/data/rpm.egg.asc +++ b/data/rpm.egg.asc @@ -1,17 +1,17 @@ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 -iQIcBAABCAAGBQJmTxjqAAoJEHUU932DZrDZ0i4P/jV99lco3D9UdT0uPmdjW/5u -8FzyzaLXX3N7MJ3blArtzFvPo3P+ZSWcGDTtEC9yQLXlqxl8lEvcyd8UfASGoNgu -kJo5po1CTozNCyK/zJe2pqd62/tDr5iqCcf4+VLZ8lTeDug5CA9l9gplsOEt8xOF -fipwEjRXU3Fw3vG60sPEGqF6ixjL2Lw7WZbbYCxSZ957/rmCe2x9AB6M6YwBaQJH -85eN8NzdgZVp01d8PmdhW+BQd8YkoXyBdve+iANqEzulgNo/lycAO4/4pql5YGDh -Ad75r7Nn7zOsE9vtoeEleyn3dX7S9fhZQk/BA82+8Xh/neNE4DB85IgH5Gvj+6mj -F/y5DT7RFQxkf6eUJlq1VuiTjIlH4HKrx9YGpVGKjwKsKsDq0setgw9ojjSnk54D -WhN/Nx5xpP1Gn8tlOaG2jYvAhARK2Zz9sgPB0jgXJLGjsLXyFKjec87ODEJFrcB3 -/1in9ZmugMd2ot/8/ec4KkT+xaKjcsJQPJF7gUrPeaPOhwyfKgluWIWaJi3B2S8u -X2qBxigKh68zPi8IN7CBm3NTe1pL+wkhzbdysYwzYMBSZRl09/YB2MG97tuPTCKe -cFtmFMUPhuvdkCKqlQrz4xZyWfSLzALWJwjCmZKxXdlazG8xW/WX+FYgAJVypoMZ -YgDjSJ7bPsHqFyTXEUOE -=mIqs +iQIcBAABCAAGBQJmmT4cAAoJEHUU932DZrDZTOcQAJfbHjz4fCK4AXx140GHHzSs +HY5Ox/zm5Nfc5aW4ZI40G6iF32Pmb3Em5T39b4Wi7PHEMTeUWjLIWor7EusZp6OX +1lhpSUW+15ZvUO5Imb/S7uJKHmEqIr0vuB9uGycWQqJVAXahtYYDU8tPM9QrUcY9 +X9eo7regDibusETu80X9DiAnS/0Qsf/w3rU3Xm5Rlc5+B7qmUWC2qO0uCm7w2zqe +G2Y+lmj6rKWY7FgwFMUyPgfdXIUqwwowi4tRem0a2dghGSxS7ikImgNQ4WzoTPOZ +i7FW280NM4u8w0GysSzG6xnzmclp+dZSPoqNYNirIcUNoAiptaVLGWntjXxGRrmK +lOHcvI9yEvN8+4JN+w//zg6zlNaWH4qQZ7wGn+wKleHXPPYJ8WX1V4I2QkdP0vPd +ZjUl5mGJFOCCoPlkT8HbkiDEa90PJetfpkBSXYkCzM3Tsg0u0RsaJT4Y9yzLP0GT +0MXMKgOVVlQ9BBNasaXJqPZeF7m4Si/2iLMAx7cFxDe/WtfQpep3mBpWG5rd4Dyf +1eJeUV3LW9hjIDBiPrQM7rK+xEG6DquUH4HD9z7hVUhcCWAZn8O74R1VIRZrjhDL +DN7A8TtLxb9qEoyyho0fCzisGzJmFbNMCLjEL0ARSy0KzlkvHymvrxJfqLx7c00+ +qn/pz18VgDKJB2M2hIPt +=1j57 -----END PGP SIGNATURE-----