[Aide] Help about a difficult matching rule

Bob Proulx bob at proulx.com
Thu May 25 19:38:20 EEST 2006


Costas Zreikas wrote:
> Please can anyone help me on how to form a rule so to exclude files like;
> 
> /lib/klibc/events/debug.00788.module.add.1250

Are those files?  Or directories?

> In my aide.conf I have the lines;
> 
> =/lib/klibc/events/$ R-m-c
> !/lib/klibc/events/debug.\d{5}.\w.add.\w{1,5}
> /lib R

Please see this bug with information that relates to your problem.

  http://sourceforge.net/tracker/index.php?func=detail&aid=1162575&group_id=86976&atid=581579

It is a bug that no one has been able to figure out yet.

Bob


More information about the Aide mailing list