[Aide] How to properly use ANF?

Virolainen Pablo pablo at cs.tut.fi
Sat Nov 12 14:53:15 EET 2005


On Sat, 12 Nov 2005, Marc Haber wrote:

> Any idea why my ANF clause doesn't keep syslog.2.gz from being listed
> as "added"?

Propably because ANF isn't working. We will mark file as moved in which 
causes the file to be handled like "I".

--- aide-ANF.broken/src/gen_list.c	Sat Nov 12 14:45:14 2005
+++ aide-with-ANF/src/gen_list.c	Sat Nov 12 14:45:48 2005
@@ -1122,7 +1122,7 @@
        (file->attr & DB_NEWFILE) &&
        (node->new_data!=NULL) &&
        (node->old_data==NULL)) {
-	 node->checked|=DB_NEW|NODE_MOVED_IN;
+	 node->checked|=DB_NEW;
    }
  }

Duke NEMO / C.O.M.A
alias pablo the pallo virolainen
-------------- next part --------------
--- aide-ANF.broken/src/gen_list.c	Sat Nov 12 14:45:14 2005
+++ aide-with-ANF/src/gen_list.c	Sat Nov 12 14:45:48 2005
@@ -1122,7 +1122,7 @@
       (file->attr & DB_NEWFILE) && 
       (node->new_data!=NULL) &&
       (node->old_data==NULL)) {
-	 node->checked|=DB_NEW|NODE_MOVED_IN;
+	 node->checked|=DB_NEW;
   }
 }
 


More information about the Aide mailing list