{"action":"closed","number":1762,"pull_request":{"url":"https://api.github.com/repos/wazuh/wazuh/pulls/1762","id":226934957,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI2OTM0OTU3","html_url":"https://github.com/wazuh/wazuh/pull/1762","diff_url":"https://github.com/wazuh/wazuh/pull/1762.diff","patch_url":"https://github.com/wazuh/wazuh/pull/1762.patch","issue_url":"https://api.github.com/repos/wazuh/wazuh/issues/1762","number":1762,"state":"closed","locked":false,"title":"Fix whodata in Linux ","user":{"login":"Cerv1","id":11405177,"node_id":"MDQ6VXNlcjExNDA1MTc3","avatar_url":"https://avatars1.githubusercontent.com/u/11405177?v=4","gravatar_id":"","url":"https://api.github.com/users/Cerv1","html_url":"https://github.com/Cerv1","followers_url":"https://api.github.com/users/Cerv1/followers","following_url":"https://api.github.com/users/Cerv1/following{/other_user}","gists_url":"https://api.github.com/users/Cerv1/gists{/gist_id}","starred_url":"https://api.github.com/users/Cerv1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Cerv1/subscriptions","organizations_url":"https://api.github.com/users/Cerv1/orgs","repos_url":"https://api.github.com/users/Cerv1/repos","events_url":"https://api.github.com/users/Cerv1/events{/privacy}","received_events_url":"https://api.github.com/users/Cerv1/received_events","type":"User","site_admin":false},"body":"Hi team,\r\n\r\nThe main purpose of this pull request is to fix the following scenarios:\r\n\r\n- Previously, `whodata` was able to start before the _first sycheck scan_ was finished. This generated an inconsistency as the DB was not initialized correctly and any deletion generated an error as it tried to delete a nonexistent file in the DB. To solve this problem, we have decided to start whodata once the first scan is finished, which guarantees data consistency.\r\n\r\n- Until now, there was no `whodata` alert for deleted files inside a folder (#1714) in Linux. The problem was related to an `auditd` failure, which did not generate the paths correctly if the call was recursive. \r\n\r\nBest regards,\r\nCerv1.","created_at":"2018-10-30T14:04:03Z","updated_at":"2018-11-15T12:04:57Z","closed_at":"2018-11-15T12:04:56Z","merged_at":"2018-11-15T12:04:56Z","merge_commit_sha":"b5c2ae5c81ffbfd26db359ae46923af8278af7af","assignee":{"login":"albertomn86","id":14975138,"node_id":"MDQ6VXNlcjE0OTc1MTM4","avatar_url":"https://avatars1.githubusercontent.com/u/14975138?v=4","gravatar_id":"","url":"https://api.github.com/users/albertomn86","html_url":"https://github.com/albertomn86","followers_url":"https://api.github.com/users/albertomn86/followers","following_url":"https://api.github.com/users/albertomn86/following{/other_user}","gists_url":"https://api.github.com/users/albertomn86/gists{/gist_id}","starred_url":"https://api.github.com/users/albertomn86/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/albertomn86/subscriptions","organizations_url":"https://api.github.com/users/albertomn86/orgs","repos_url":"https://api.github.com/users/albertomn86/repos","events_url":"https://api.github.com/users/albertomn86/events{/privacy}","received_events_url":"https://api.github.com/users/albertomn86/received_events","type":"User","site_admin":false},"assignees":[{"login":"albertomn86","id":14975138,"node_id":"MDQ6VXNlcjE0OTc1MTM4","avatar_url":"https://avatars1.githubusercontent.com/u/14975138?v=4","gravatar_id":"","url":"https://api.github.com/users/albertomn86","html_url":"https://github.com/albertomn86","followers_url":"https://api.github.com/users/albertomn86/followers","following_url":"https://api.github.com/users/albertomn86/following{/other_user}","gists_url":"https://api.github.com/users/albertomn86/gists{/gist_id}","starred_url":"https://api.github.com/users/albertomn86/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/albertomn86/subscriptions","organizations_url":"https://api.github.com/users/albertomn86/orgs","repos_url":"https://api.github.com/users/albertomn86/repos","events_url":"https://api.github.com/users/albertomn86/events{/privacy}","received_events_url":"https://api.github.com/users/albertomn86/received_events","type":"User","site_admin":false}],"requested_reviewers":[{"login":"albertomn86","id":14975138,"node_id":"MDQ6VXNlcjE0OTc1MTM4","avatar_url":"https://avatars1.githubusercontent.com/u/14975138?v=4","gravatar_id":"","url":"https://api.github.com/users/albertomn86","html_url":"https://github.com/albertomn86","followers_url":"https://api.github.com/users/albertomn86/followers","following_url":"https://api.github.com/users/albertomn86/following{/other_user}","gists_url":"https://api.github.com/users/albertomn86/gists{/gist_id}","starred_url":"https://api.github.com/users/albertomn86/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/albertomn86/subscriptions","organizations_url":"https://api.github.com/users/albertomn86/orgs","repos_url":"https://api.github.com/users/albertomn86/repos","events_url":"https://api.github.com/users/albertomn86/events{/privacy}","received_events_url":"https://api.github.com/users/albertomn86/received_events","type":"User","site_admin":false}],"requested_teams":[],"labels":[{"id":246680124,"node_id":"MDU6TGFiZWwyNDY2ODAxMjQ=","url":"https://api.github.com/repos/wazuh/wazuh/labels/bug","name":"bug","color":"d93f0b","default":true},{"id":907878541,"node_id":"MDU6TGFiZWw5MDc4Nzg1NDE=","url":"https://api.github.com/repos/wazuh/wazuh/labels/fim","name":"fim","color":"bfd4f2","default":false}],"milestone":null,"commits_url":"https://api.github.com/repos/wazuh/wazuh/pulls/1762/commits","review_comments_url":"https://api.github.com/repos/wazuh/wazuh/pulls/1762/comments","review_comment_url":"https://api.github.com/repos/wazuh/wazuh/pulls/comments{/number}","comments_url":"https://api.github.com/repos/wazuh/wazuh/issues/1762/comments","statuses_url":"https://api.github.com/repos/wazuh/wazuh/statuses/5a462406ea22c4f45c75ae87f7f9d5afbf1eb147","head":{"label":"wazuh:fix-whodata-linux","ref":"fix-whodata-linux","sha":"5a462406ea22c4f45c75ae87f7f9d5afbf1eb147","user":{"login":"wazuh","id":13752566,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEzNzUyNTY2","avatar_url":"https://avatars3.githubusercontent.com/u/13752566?v=4","gravatar_id":"","url":"https://api.github.com/users/wazuh","html_url":"https://github.com/wazuh","followers_url":"https://api.github.com/users/wazuh/followers","following_url":"https://api.github.com/users/wazuh/following{/other_user}","gists_url":"https://api.github.com/users/wazuh/gists{/gist_id}","starred_url":"https://api.github.com/users/wazuh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wazuh/subscriptions","organizations_url":"https://api.github.com/users/wazuh/orgs","repos_url":"https://api.github.com/users/wazuh/repos","events_url":"https://api.github.com/users/wazuh/events{/privacy}","received_events_url":"https://api.github.com/users/wazuh/received_events","type":"Organization","site_admin":false},"repo":{"id":40556106,"node_id":"MDEwOlJlcG9zaXRvcnk0MDU1NjEwNg==","name":"wazuh","full_name":"wazuh/wazuh","private":false,"owner":{"login":"wazuh","id":13752566,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEzNzUyNTY2","avatar_url":"https://avatars3.githubusercontent.com/u/13752566?v=4","gravatar_id":"","url":"https://api.github.com/users/wazuh","html_url":"https://github.com/wazuh","followers_url":"https://api.github.com/users/wazuh/followers","following_url":"https://api.github.com/users/wazuh/following{/other_user}","gists_url":"https://api.github.com/users/wazuh/gists{/gist_id}","starred_url":"https://api.github.com/users/wazuh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wazuh/subscriptions","organizations_url":"https://api.github.com/users/wazuh/orgs","repos_url":"https://api.github.com/users/wazuh/repos","events_url":"https://api.github.com/users/wazuh/events{/privacy}","received_events_url":"https://api.github.com/users/wazuh/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/wazuh/wazuh","description":"Wazuh - Host and endpoint security","fork":false,"url":"https://api.github.com/repos/wazuh/wazuh","forks_url":"https://api.github.com/repos/wazuh/wazuh/forks","keys_url":"https://api.github.com/repos/wazuh/wazuh/keys{/key_id}","collaborators_url":"https://api.github.com/repos/wazuh/wazuh/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/wazuh/wazuh/teams","hooks_url":"https://api.github.com/repos/wazuh/wazuh/hooks","issue_events_url":"https://api.github.com/repos/wazuh/wazuh/issues/events{/number}","events_url":"https://api.github.com/repos/wazuh/wazuh/events","assignees_url":"https://api.github.com/repos/wazuh/wazuh/assignees{/user}","branches_url":"https://api.github.com/repos/wazuh/wazuh/branches{/branch}","tags_url":"https://api.github.com/repos/wazuh/wazuh/tags","blobs_url":"https://api.github.com/repos/wazuh/wazuh/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/wazuh/wazuh/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/wazuh/wazuh/git/refs{/sha}","trees_url":"https://api.github.com/repos/wazuh/wazuh/git/trees{/sha}","statuses_url":"https://api.github.com/repos/wazuh/wazuh/statuses/{sha}","languages_url":"https://api.github.com/repos/wazuh/wazuh/languages","stargazers_url":"https://api.github.com/repos/wazuh/wazuh/stargazers","contributors_url":"https://api.github.com/repos/wazuh/wazuh/contributors","subscribers_url":"https://api.github.com/repos/wazuh/wazuh/subscribers","subscription_url":"https://api.github.com/repos/wazuh/wazuh/subscription","commits_url":"https://api.github.com/repos/wazuh/wazuh/commits{/sha}","git_commits_url":"https://api.github.com/repos/wazuh/wazuh/git/commits{/sha}","comments_url":"https://api.github.com/repos/wazuh/wazuh/comments{/number}","issue_comment_url":"https://api.github.com/repos/wazuh/wazuh/issues/comments{/number}","contents_url":"https://api.github.com/repos/wazuh/wazuh/contents/{+path}","compare_url":"https://api.github.com/repos/wazuh/wazuh/compare/{base}...{head}","merges_url":"https://api.github.com/repos/wazuh/wazuh/merges","archive_url":"https://api.github.com/repos/wazuh/wazuh/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/wazuh/wazuh/downloads","issues_url":"https://api.github.com/repos/wazuh/wazuh/issues{/number}","pulls_url":"https://api.github.com/repos/wazuh/wazuh/pulls{/number}","milestones_url":"https://api.github.com/repos/wazuh/wazuh/milestones{/number}","notifications_url":"https://api.github.com/repos/wazuh/wazuh/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/wazuh/wazuh/labels{/name}","releases_url":"https://api.github.com/repos/wazuh/wazuh/releases{/id}","deployments_url":"https://api.github.com/repos/wazuh/wazuh/deployments","created_at":"2015-08-11T17:39:03Z","updated_at":"2018-11-14T20:02:25Z","pushed_at":"2018-11-15T12:04:56Z","git_url":"git://github.com/wazuh/wazuh.git","ssh_url":"git@github.com:wazuh/wazuh.git","clone_url":"https://github.com/wazuh/wazuh.git","svn_url":"https://github.com/wazuh/wazuh","homepage":"https://wazuh.com/","size":70532,"stargazers_count":648,"watchers_count":648,"language":"C","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":212,"mirror_url":null,"archived":false,"open_issues_count":426,"license":{"key":"other","name":"Other","spdx_id":"NOASSERTION","url":null,"node_id":"MDc6TGljZW5zZTA="},"forks":212,"open_issues":426,"watchers":648,"default_branch":"master"}},"base":{"label":"wazuh:improve-whodata","ref":"improve-whodata","sha":"4c6635787be80102364643fd07822c80a2268ad7","user":{"login":"wazuh","id":13752566,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEzNzUyNTY2","avatar_url":"https://avatars3.githubusercontent.com/u/13752566?v=4","gravatar_id":"","url":"https://api.github.com/users/wazuh","html_url":"https://github.com/wazuh","followers_url":"https://api.github.com/users/wazuh/followers","following_url":"https://api.github.com/users/wazuh/following{/other_user}","gists_url":"https://api.github.com/users/wazuh/gists{/gist_id}","starred_url":"https://api.github.com/users/wazuh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wazuh/subscriptions","organizations_url":"https://api.github.com/users/wazuh/orgs","repos_url":"https://api.github.com/users/wazuh/repos","events_url":"https://api.github.com/users/wazuh/events{/privacy}","received_events_url":"https://api.github.com/users/wazuh/received_events","type":"Organization","site_admin":false},"repo":{"id":40556106,"node_id":"MDEwOlJlcG9zaXRvcnk0MDU1NjEwNg==","name":"wazuh","full_name":"wazuh/wazuh","private":false,"owner":{"login":"wazuh","id":13752566,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEzNzUyNTY2","avatar_url":"https://avatars3.githubusercontent.com/u/13752566?v=4","gravatar_id":"","url":"https://api.github.com/users/wazuh","html_url":"https://github.com/wazuh","followers_url":"https://api.github.com/users/wazuh/followers","following_url":"https://api.github.com/users/wazuh/following{/other_user}","gists_url":"https://api.github.com/users/wazuh/gists{/gist_id}","starred_url":"https://api.github.com/users/wazuh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wazuh/subscriptions","organizations_url":"https://api.github.com/users/wazuh/orgs","repos_url":"https://api.github.com/users/wazuh/repos","events_url":"https://api.github.com/users/wazuh/events{/privacy}","received_events_url":"https://api.github.com/users/wazuh/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/wazuh/wazuh","description":"Wazuh - Host and endpoint security","fork":false,"url":"https://api.github.com/repos/wazuh/wazuh","forks_url":"https://api.github.com/repos/wazuh/wazuh/forks","keys_url":"https://api.github.com/repos/wazuh/wazuh/keys{/key_id}","collaborators_url":"https://api.github.com/repos/wazuh/wazuh/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/wazuh/wazuh/teams","hooks_url":"https://api.github.com/repos/wazuh/wazuh/hooks","issue_events_url":"https://api.github.com/repos/wazuh/wazuh/issues/events{/number}","events_url":"https://api.github.com/repos/wazuh/wazuh/events","assignees_url":"https://api.github.com/repos/wazuh/wazuh/assignees{/user}","branches_url":"https://api.github.com/repos/wazuh/wazuh/branches{/branch}","tags_url":"https://api.github.com/repos/wazuh/wazuh/tags","blobs_url":"https://api.github.com/repos/wazuh/wazuh/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/wazuh/wazuh/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/wazuh/wazuh/git/refs{/sha}","trees_url":"https://api.github.com/repos/wazuh/wazuh/git/trees{/sha}","statuses_url":"https://api.github.com/repos/wazuh/wazuh/statuses/{sha}","languages_url":"https://api.github.com/repos/wazuh/wazuh/languages","stargazers_url":"https://api.github.com/repos/wazuh/wazuh/stargazers","contributors_url":"https://api.github.com/repos/wazuh/wazuh/contributors","subscribers_url":"https://api.github.com/repos/wazuh/wazuh/subscribers","subscription_url":"https://api.github.com/repos/wazuh/wazuh/subscription","commits_url":"https://api.github.com/repos/wazuh/wazuh/commits{/sha}","git_commits_url":"https://api.github.com/repos/wazuh/wazuh/git/commits{/sha}","comments_url":"https://api.github.com/repos/wazuh/wazuh/comments{/number}","issue_comment_url":"https://api.github.com/repos/wazuh/wazuh/issues/comments{/number}","contents_url":"https://api.github.com/repos/wazuh/wazuh/contents/{+path}","compare_url":"https://api.github.com/repos/wazuh/wazuh/compare/{base}...{head}","merges_url":"https://api.github.com/repos/wazuh/wazuh/merges","archive_url":"https://api.github.com/repos/wazuh/wazuh/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/wazuh/wazuh/downloads","issues_url":"https://api.github.com/repos/wazuh/wazuh/issues{/number}","pulls_url":"https://api.github.com/repos/wazuh/wazuh/pulls{/number}","milestones_url":"https://api.github.com/repos/wazuh/wazuh/milestones{/number}","notifications_url":"https://api.github.com/repos/wazuh/wazuh/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/wazuh/wazuh/labels{/name}","releases_url":"https://api.github.com/repos/wazuh/wazuh/releases{/id}","deployments_url":"https://api.github.com/repos/wazuh/wazuh/deployments","created_at":"2015-08-11T17:39:03Z","updated_at":"2018-11-14T20:02:25Z","pushed_at":"2018-11-15T12:04:56Z","git_url":"git://github.com/wazuh/wazuh.git","ssh_url":"git@github.com:wazuh/wazuh.git","clone_url":"https://github.com/wazuh/wazuh.git","svn_url":"https://github.com/wazuh/wazuh","homepage":"https://wazuh.com/","size":70532,"stargazers_count":648,"watchers_count":648,"language":"C","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":212,"mirror_url":null,"archived":false,"open_issues_count":426,"license":{"key":"other","name":"Other","spdx_id":"NOASSERTION","url":null,"node_id":"MDc6TGljZW5zZTA="},"forks":212,"open_issues":426,"watchers":648,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/wazuh/wazuh/pulls/1762"},"html":{"href":"https://github.com/wazuh/wazuh/pull/1762"},"issue":{"href":"https://api.github.com/repos/wazuh/wazuh/issues/1762"},"comments":{"href":"https://api.github.com/repos/wazuh/wazuh/issues/1762/comments"},"review_comments":{"href":"https://api.github.com/repos/wazuh/wazuh/pulls/1762/comments"},"review_comment":{"href":"https://api.github.com/repos/wazuh/wazuh/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/wazuh/wazuh/pulls/1762/commits"},"statuses":{"href":"https://api.github.com/repos/wazuh/wazuh/statuses/5a462406ea22c4f45c75ae87f7f9d5afbf1eb147"}},"author_association":"MEMBER","merged":true,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":{"login":"albertomn86","id":14975138,"node_id":"MDQ6VXNlcjE0OTc1MTM4","avatar_url":"https://avatars1.githubusercontent.com/u/14975138?v=4","gravatar_id":"","url":"https://api.github.com/users/albertomn86","html_url":"https://github.com/albertomn86","followers_url":"https://api.github.com/users/albertomn86/followers","following_url":"https://api.github.com/users/albertomn86/following{/other_user}","gists_url":"https://api.github.com/users/albertomn86/gists{/gist_id}","starred_url":"https://api.github.com/users/albertomn86/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/albertomn86/subscriptions","organizations_url":"https://api.github.com/users/albertomn86/orgs","repos_url":"https://api.github.com/users/albertomn86/repos","events_url":"https://api.github.com/users/albertomn86/events{/privacy}","received_events_url":"https://api.github.com/users/albertomn86/received_events","type":"User","site_admin":false},"comments":0,"review_comments":2,"maintainer_can_modify":false,"commits":8,"additions":101,"deletions":16,"changed_files":9}}
{"actor":{"display_login":"albertomn86"}}