[Aide] Monitoring log files

Sonixxfx sonixxfx at gmail.com
Fri Dec 8 15:59:17 EET 2006


Sorry, Richard the example you've provided is correct.

Ben

2006/12/8, Sonixxfx <sonixxfx at gmail.com>:
>
> Nice! That also works now, but I changed "=/etc/mtab  p+n+u+g" to
> "=/etc/mtab$ p+n+u+g" to get it to work.
>
> Thanks for your help guys, you have helped  me real well.
>
> Regards/Groeten uit Leiden,
>
> Ben
>
>
> 2006/12/8, Richard van den Berg <richard at vdberg.org>:
> >
> > Sonixxfx wrote:
> > > Can you show me how I can do that? I have tried to set it up myself
> > but
> > > without success. When something other than p+n+u+g of /etc/mtab
> > changes,
> > > aide shows me that /etc is changed, but I don't want that.
> >
> > That makes sense because some attributes of a directory are changed when
> > a file inside it is changed. This might do the trick:
> >
> > =/etc p+n+u+g
> > =/etc/mtab p+n+u+g
> > /etc/.* p+i+n+u+g+s+b+m+c+md5+sha1
> >
> > Play with the values for =/etc to get what you want.
> >
> > Sincerely,
> >
> > Richard van den Berg
> > _______________________________________________
> > Aide mailing list
> > Aide at cs.tut.fi
> > https://mailman.cs.tut.fi/mailman/listinfo/aide
> >
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.cs.tut.fi/pipermail/aide/attachments/20061208/1f933b74/attachment.html 


More information about the Aide mailing list