[Aide] Help about a difficult matching rule
Bob Proulx
bob at proulx.com
Thu May 25 19:38:20 EEST 2006
Costas Zreikas wrote:
> Please can anyone help me on how to form a rule so to exclude files like;
>
> /lib/klibc/events/debug.00788.module.add.1250
Are those files? Or directories?
> In my aide.conf I have the lines;
>
> =/lib/klibc/events/$ R-m-c
> !/lib/klibc/events/debug.\d{5}.\w.add.\w{1,5}
> /lib R
Please see this bug with information that relates to your problem.
http://sourceforge.net/tracker/index.php?func=detail&aid=1162575&group_id=86976&atid=581579
It is a bug that no one has been able to figure out yet.
Bob
More information about the Aide
mailing list