[Aide] Monitoring log files

Sonixxfx sonixxfx at gmail.com
Fri Dec 8 14:27:01 EET 2006


Nice! That also works now, but I changed "=/etc/mtab  p+n+u+g" to
"=/etc/mtab$ p+n+u+g" to get it to work.

Thanks for your help guys, you have helped  me real well.

Regards/Groeten uit Leiden,

Ben


2006/12/8, Richard van den Berg <richard at vdberg.org>:
>
> Sonixxfx wrote:
> > Can you show me how I can do that? I have tried to set it up myself but
> > without success. When something other than p+n+u+g of /etc/mtab changes,
> > aide shows me that /etc is changed, but I don't want that.
>
> That makes sense because some attributes of a directory are changed when
> a file inside it is changed. This might do the trick:
>
> =/etc p+n+u+g
> =/etc/mtab p+n+u+g
> /etc/.* p+i+n+u+g+s+b+m+c+md5+sha1
>
> Play with the values for =/etc to get what you want.
>
> Sincerely,
>
> Richard van den Berg
> _______________________________________________
> Aide mailing list
> Aide at cs.tut.fi
> https://mailman.cs.tut.fi/mailman/listinfo/aide
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.cs.tut.fi/pipermail/aide/attachments/20061208/1968e83b/attachment.html 


More information about the Aide mailing list