[Aide] Regexp Problem

[Richard van den Berg]

Hello Pete,

You did not Google hard enough:
https://mailman.cs.tut.fi/pipermail/aide/2005-August/000160.html

Pete J. O'Hara wrote:
> Using a regexp tester I have tells me that the following expression 
> matches what I need
> /var/spool/postfix(_f)?/lib(64)?/.*\.so(\.[^/]*)*
> 
> But putting this in aide.conf like so:
> /var/spool/postfix(_f)?/lib(64)?/.*\.so(\.[^/]*)* Binlib
> 
> Doesn't match.

Aide does not allow regexes in the directory part of a selection rule.
The reason for this, is that aide uses that path information to decide
which directories to recurse into. Only the file part is a full featured
regex. So

/var/spool/postfix_f/lib64/.*\.so(\.[^/]*)* Binlib
/var/spool/postfix_f/lib/.*\.so(\.[^/]*)* Binlib
/var/spool/postfix/lib64/.*\.so(\.[^/]*)* Binlib
/var/spool/postfix/lib/.*\.so(\.[^/]*)* Binlib

should work fine. A future version of aide might support regexes in
directory names as well.


Richard van den Berg