[Aide] ARF/ANF patch breaking new/removed reporting (was: Allow ARF as opposite to ANF?)

[Marc Haber]

On Mon, Nov 21, 2005 at 11:47:38AM +0200, Virolainen Pablo wrote:
> On Mon, 21 Nov 2005, Virolainen Pablo wrote:
> > On Fri, 18 Nov 2005, Marc Haber wrote:
> >> On Wed, Nov 16, 2005 at 04:26:53PM +0100, Marc Haber wrote:
> >>> Unfortunately, aide built from last night's snapshot doesn't report
> >>> any added and/or removed files any more, only changes. This seems to
> >>> be independent from ANF/ARF being used or not, and going back to aide
> >>> compiled from a 2005-11-07 snapshot and running --update against the
> >>> same database reported added and removed files as intended.
> >>
> >> Any news on this?
> >>
> >> Greetings
> >> Marc
> >
> > Cannot reproduce with current cvs version. But I'll look at the source
> > anyway..
> 
> Ooos.. I have forgot to cvs commit. Current cvs version should work.

NACK. With current CVS version (sourceforge CVS), and the attached
config file, aide compiled from CVS doesn't report a new file
/usr/local/bla as new, but it correctly reports /usr/local as being
changed. aide compiled from CVS snapshot of 2005-11-07 correctly flags
the file as new.

The reference database in question is available on request in private
mail.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835


database=file:/var/lib/aide/aide.db
database_out=file:/var/lib/aide/aide.db.new

Binlib = n+p+i+u+g+s+b+m+c+md5+sha1+rmd160+haval+gost+crc32+tiger

/ Binlib

!/mnt/usr/usr
!/mnt/home/home
!/mnt/var/var
!/mnt/tmp/tmp

!/mnt/bigstuff$
!/mnt/backups$
!/mnt/usb
!/mnt/tmpdisk
!/media/cdrom
!/media/floppy
!/media/usb

!/mnt/backups

!/home$
/home/ Binlib
!/home/mh

!/dev$
!/proc$
!/sys$
!/usr$
/usr/ Binlib

!/tmp$
/tmp/ Binlib