[Aide] /usr/sbin/aide changes on x86_64???

James Antill james-aide-38mkm at and.org
Fri Nov 3 17:37:35 EET 2006


"George Geller" <george_geller at speakeasy.net> writes:

> I ran aide --init, then copied the db, then ran aide --check and got the following:
>
> File: /usr/sbin/aide
>   Size     : 164816                            , 167344 
>   Ctime    : 2006-11-02 13:30:39               , 2006-11-03 04:03:05 
>   Inode    : 724895                            , 724775 
>   MD5      : eY01XESYfdRQJ99TbVZWRg==          , J4KHq1uuZ6RCzRvIJ9KASA== 
>   SHA1     : VFNgzP2YVLNYVbU3Ed1rkdD4i+4=      , KSfpU0L0kDLjH6VgYx26cukElLc= 
>
> I'm runing Fedora Core 5 x86_64.  Is this normal behavior?  I did't know a binary file would change the first time your ran it.

 Given the timestamp, I'd guess it's prelink changing the binary.

-- 
James Antill - <james.antill at redhat.com>


More information about the Aide mailing list