fwupd error in syslog, ossec alert for Focal

[emkll]

Description

On both a Mac mini and a NUC5PYH running Ubuntu Focal, I receive the following ossec alerts (and associated syslog entries)

1. On the mac mini, 2 errors

OSSEC HIDS Notification.
2021 Mar 01 13:22:55

Received From: (app) 10.20.2.2->/var/log/syslog
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Mar  1 13:22:53 app fwupd[133921]: 13:22:53:0576 FuEngine             Failed to load SMBIOS: invalid DMI data size, got 2527 bytes, expected 2745



 --END OF NOTIFICATION



OSSEC HIDS Notification.
2021 Mar 01 13:22:55

Received From: (app) 10.20.2.2->/var/log/syslog
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Mar  1 13:22:53 app fwupd[133921]: 13:22:53:0883 FuPluginUefi         Error opening directory “/sys/firmware/efi/esrt/entries�: No such file or directory



 --END OF NOTIFICATION

2. On the NUC, only 1 of the two errors

OSSEC HIDS Notification.
2021 Mar 01 11:51:47

Received From: mon->/var/log/syslog
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Mar  1 11:51:46 mon fwupd[133502]: 11:51:46:0509 FuPluginUefi         Error opening directory “/sys/firmware/efi/esrt/entries�: No such file or directory



 --END OF NOTIFICATION

Comments

The errors observed are likely a result of my machines either not supported by fwupd or perhaps legacy boot enabled. We should ensure fwupd is properly configured or supported on the hosts on which it is running, or remove the package entirely.

[zenmonkeykstop]

reproducible on nuc7:

Received From: mon->/var/log/syslog
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Mar  4 14:03:02 mon fwupd[134631]: 14:03:02:0629 FuPluginUefi         Error opening directory “/sys/firmware/efi/esrt/entries�: No such file or directory

[eloquence]

Seeing this in my prod logs as well on Ubuntu 20.04 (haven't checked OSSEC alerts yet).