[Aide] aide 0.11 is generating a VERY large database.

[Marc Haber]

On Mon, Feb 05, 2007 at 10:48:02AM +0000, Adam Funk wrote:
> Would you also be surprised if I said that my daily report (without
> some of the more radical exclusions such as "!/var/log") *always*
> contained several dozen changed files?

Yes, this is expected since you probaby use different packages than I
do. I would appreciate if you could write rules for them and submit
them.

>   Would you consider that normal on your systems?

No, a normal report should be empty: "All files match AIDE database".

I have not yet solved the challenge of logs that were rotated.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835