Scan causes ACL Warning per directory db entry on FreeBSD #214

Running aide --check it seems that each a number of scanned directories is causing ACL warnings like the ones below

WARNING: failed to get default ACL for directory '/usr/share/calendar': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/usr/share/mk': No such file or directory (disabling acl attribute)
...
(thousands of those)

I have sampled some of those dir locations and confirmed their existence however I am not sure whether those warnings are genuine or not

Have been running aide on FreeBSD 13 for a long period with the ACL issue starting at the same time with issue #208. I cannot recall when this problem started however I know it was working fine up to 09JUL (and later up to some point) with version 0.18.6

Aide check !! Wed Jul  9 01:06:07 BST 2025
Entry /dev/fd/6 in databases has different attributes: -e2fsattrs
Start timestamp: 2025-07-09 01:06:07 +0100 (AIDE 0.18.6)
AIDE found differences between database and filesystem!!

Summary:
  Total number of entries:      70142
  Added entries:                0
  Removed entries:              1
  Changed entries:              1

=========
Currently installed version on FreeBSD 13.5

 AIDE 0.19.2
 
 Compile-time options:
 use pcre2: mandatory
 use pthread: mandatory
 use zlib compression: yes
 use POSIX ACLs: yes
 use SELinux: no
 use xattr: no
 use POSIX 1003.1e capabilities: no
 use e2fsattrs: yes
 use cURL: no
 use Nettle crypto library: no
 use GNU crypto library: yes
 use Linux Auditing Framework: no
 use locale: no
 syslog ident: aide
 syslog logopt: LOG_CONS
 syslog priority: LOG_NOTICE
 default syslog facility: LOG_LOCAL0
 
 Default config values:
 config file: /usr/local/etc/aide.conf
 database_in: file:/usr/local/etc/aide.db
 database_out: file:/usr/local/etc/aide.db.new
 
 Available compiled-in attributes:
 acl: yes
 xattrs: no
 selinux: no
 e2fsattrs: yes
 caps: no
 
 Available hashsum attributes:
 md5: yes
 sha1: yes
 sha256: yes
 sha512: yes
 rmd160: yes
 tiger: no
 crc32: no
 crc32b: no
 haval: no
 whirlpool: no
 gost: yes
 stribog256: yes
 stribog512: yes
 sha512_256: yes
 sha3_256: yes
 sha3_512: yes
 
 Default compound groups:
 R: l+p+u+g+s+c+m+i+n+acl+ftype+e2fsattrs+sha3_256
 L: l+p+u+g+i+n+acl+ftype+e2fsattrs
: l+p+u+g+s+i+n+acl+ftype+e2fsattrs+growing
 H: sha256+sha512+stribog256+stribog512+sha512_256+sha3_256+sha3_512
 X: acl+e2fsattrs

Not sure if related to #211 as I have been running on FreeBSD 13 for years with no issues until some time over the last 6 months where the issue with the recursion and ACL warnings started happening.

I did a narrow test run and it appears that ACL warnings affect only directories

ls -dl /boot/*/
drwxr-xr-x  2 root  wheel   3 Sep 14  2024 /boot/defaults/
drwxr-xr-x  5 root  wheel   5 Jul 20  2025 /boot/dtb/
drwxr-xr-x  2 root  wheel   2 Aug  9  2022 /boot/efi/
drwxr-xr-x  2 root  wheel   2 Oct 23  2020 /boot/firmware/
drwxr-xr-x  2 root  wheel  15 Sep 14  2024 /boot/fonts/
drwxr-xr-x  2 root  wheel   5 Aug  9  2022 /boot/images/
drwxr-xr-x  2 root  wheel   3 Nov  1 16:58 /boot/kernel.old/
drwxr-xr-x  2 root  wheel   2 Oct 23  2020 /boot/kernel/
drwxr-xr-x  2 root  wheel   2 Apr 20  2022 /boot/loader.conf.d/
drwxr-xr-x  2 root  wheel  17 Jul 20  2025 /boot/lua/
drwxr-xr-x  2 root  wheel   2 Oct 23  2020 /boot/modules/
drwxr-xr-x  2 root  wheel   2 Aug  9  2022 /boot/uboot/
drwxr-xr-x  2 root  wheel   2 Oct 23  2020 /boot/zfs/

# aide -l '/boot' -W 8
WARNING: failed to get default ACL for directory '/boot': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/modules': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/loader.conf.d': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/fonts': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/uboot': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/defaults': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/images': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/kernel': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/kernel.old': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/lua': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/zfs': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/efi': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/firmware': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/dtb': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/dtb/rockchip': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/dtb/allwinner': No such file or directory (disabling acl attribute)
WARNING: failed to get default ACL for directory '/boot/dtb/overlays': No such file or directory (disabling acl attribute)
Start timestamp: 2026-02-08 13:22:53 +0000 (AIDE 0.19.2)
AIDE found NO differences between database and filesystem. Looks okay!!
Limit: /boot

Number of entries:      104

Originally posted by @gvelim in #208