[Aide] aide.conf doesn't work under cygwin

Jan Trukenmüller truken at sit.fhg.de
Wed Mar 9 12:35:33 EET 2005


Hi,

I have a working aide.conf running under linux, but a nearly similar configuration doesn't work under cygwin.
Here's my aide.conf for cygwin:

database=file:/var/log/aide/aide.db
database_new=file:/var/log/aide/aide.db.new
database_out=file:/var/log/aide/aide.db.new
verbose=5
report_url=stdout
Norm=s+md5
/usr/bin.* Norm
/cygdrive/c/Programme.* Norm

The command 'aide --init' says:

AIDE, version 0.10

### AIDE database initialized.

And the file /var/log/aide/aide.db.new is modified, but it's nearly empty, although, /usr/bin is full of cygwin programs, and /cygdrive/c/Programme is full of Windows Programs.

Here's /var/log/aide/aide.db.new:

@@begin_db
# This file was generated by Aide, version 0.10
# Time of generation was 2005-03-09 11:21:26
@@db_spec name lname attr size md5
@@end_db


If I use 'verbose=255', aide --init says:

report_url =
WARNING: Debug output enabled
Equrule
Selrule
Selrule
db_init 2
Opening file "/var/log/aide/aide.db.new" for w+
db_out is nonnull /var/log/aide/aide.db.new
decode base64
db_init 256
/ match=0, tree=168104456, attr=0
r->childs 168104648, r->parent 0, r->checked 0
rr->checked 0
r->childs 0, r->parent 168104456,r->checked 512
New start_path=/usr
r->childs 0, r->parent 168104456, r->checked 512
r->childs 168104648, r->parent 0, r->checked 0
rr->checked 0
r->childs 168105872, r->parent 168104456,r->checked 512
New start_path=/cygdrive
r->childs 168105872, r->parent 168104456, r->checked 512
rr->checked 0
r->childs 0, r->parent 168105744,r->checked 512
New start_path=/cygdrive/c
r->childs 0, r->parent 168105744, r->checked 512
r->childs 168105872, r->parent 168104456, r->checked 1536
r->childs 168104648, r->parent 0, r->checked 1024

AIDE, version 0.10

### AIDE database initialized.


Any ideas?
Thanks in advance

Jan Trukenmüller


More information about the Aide mailing list