[Aide] aide 0.11 is generating a VERY large database.

Marc Haber mh+aide at zugschlus.de
Fri Nov 10 18:47:04 EET 2006


On Fri, Nov 10, 2006 at 05:08:48PM +0100, Richard van den Berg wrote:
> Here is what I am ignoring on my Debian system:
> 
> !/tmp
> !/var/mail
> !/var/cache
> !/var/lock
> !/var/spool
> !/var/lib
> !/var/tmp
> !/var/run
> !/var/www/munin/soetens.vdberg.org

Recent aide packages have more detailed ignores for certain packages
delivered in the default config.

For example, /etc/aide/aide.conf.d/31_aide_exim4 has rules relevant
for exim4:
!/var/spool/exim4/filee[a-zA-Z0-9]{5}$
/var/spool/exim4/db/(wait-remote_smtp(_smarthost)?|retry|callout)$ VarFile
!/var/spool/exim4/input/[a-zA-Z0-9]{6}-[a-zA-Z0-9]{6}-[a-zA-Z0-9]{2}-[DH]$
!/var/spool/exim4/msglog/[a-zA-Z0-9]{6}-[a-zA-Z0-9]{6}-[a-zA-Z0-9]{2}$
!/var/spool/exim4/gnutls-params$
/var/spool/exim4(/(input|msglog|scan))?$ VarDir
/var/lib/exim4/config.autogenerated$ VarFile
/var/run/exim4/exim.pid$ VarFile
/var/(lib|run)/exim4$ VarDir

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835


More information about the Aide mailing list