[Aide] aide reporting directory changes even if not configured to

Virolainen Pablo pablo at cs.tut.fi
Thu Dec 1 14:04:24 EET 2005


On Thu, 1 Dec 2005, Marc Haber wrote:

> On Mon, Nov 28, 2005 at 08:07:01AM +0100, Marc Haber wrote:
>> I have the following configuration:
>>
>> StaticDir = n+p+i+u+g
>> Databases = n+p+u+g
>> /etc$ StaticDir
>> /etc/motd Databases
>>
>> Last night at 20:37, I umounted a file system. Now, aide reports a
>> change in /etc:
>>
>> changed:/etc
>>
>> Directory: /etc
>>   Mtime    : 2005-11-27 17:41:06               , 2005-11-27 20:37:36
>>   Ctime    : 2005-11-27 17:41:06               , 2005-11-27 20:37:36
>>
>> Why is it reporting changed mtime and ctime? It is not configured to
>> do so?
>>
>> I am using an aide CVS snapshot dated 2005-11-22 on Debian unstable.
>
> Any ideas what might be going wrong here? This happens also with other
> directories configured as StaticDir, for example /var/tmp and
> /var/backups.
>
> Greetings
> Marc

Sorry. I cannot reproduce the problem. Could you modify the test.sh so 
that it has the same problem?

for test.sh, see attachment

Duke NEMO / C.O.M.A
alias pablo the pallo virolainen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: aide-test.tar
Type: application/x-tar
Size: 10240 bytes
Desc: 
Url : https://mailman.cs.tut.fi/pipermail/aide/attachments/20051201/ba2cd93d/aide-test.tar


More information about the Aide mailing list