[Aide] Help about a difficult matching rule

[Randy Brown]

I found this to be very helpful in testing rules and regex stuff.

Randy

Costas Zreikas wrote:
> Hello List,
>
> Please can anyone help me on how to form a rule so to exclude files like;
>
> /lib/klibc/events/debug.00788.module.add.1250
>
>
> In my aide.conf I have the lines;
>
> =/lib/klibc/events/$ R-m-c
> !/lib/klibc/events/debug.\d{5}.\w.add.\w{1,5}
> /lib R
>
> I'm using SUSE 10.0 and I've found the regular expressions syntax from "man
> perlrequick"
>
> Thanx
>
> _______________________________________________
> Aide mailing list
> Aide at cs.tut.fi
> https://mailman.cs.tut.fi/mailman/listinfo/aide
>   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: randy.brown.vcf
Type: text/x-vcard
Size: 332 bytes
Desc: not available
Url : https://mailman.cs.tut.fi/pipermail/aide/attachments/20060525/42560abf/randy.brown.vcf