[Aide] Howto match kernel names with regular expressions?

[Eric Webster]

The rule in that conf only matches numbers and a dot, your the directory for
your kernel would have a hyphen in it.
 
/lib/modules/[0-9\.\-]*/modules\.dep$
 
Should do the trick. I'm not sure if the hyphen needs escaped or not, try it
and remove the slash if not.
 

Eric Webster
Enterprise Services
2CheckOut.com 

 


  _____  

From: aide-bounces at cs.tut.fi [mailto:aide-bounces at cs.tut.fi] On Behalf Of
Sonixxfx
Sent: Tuesday, January 09, 2007 3:21 AM
To: Aide user mailinglist
Subject: [Aide] Howto match kernel names with regular expressions?


Hi,

I would like to monitor the kernel directories located under /lib/modules. I
am trying to create a rule with regular expressions so that it matches all
kind of kernel names. At the moment I am using kernel-2.4.27-2-386 on
Debian. Unfortunatly the rule from /etc/aide.conf.d/31_aide_modules does not
match this kernel. I have also tried to create a rule myself but without
success.

So can someone show me what I can use to match these directories? I also
want to monitor 2.6 kernels.

Thanks for the help.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.cs.tut.fi/pipermail/aide/attachments/20070109/d2fd58e6/attachment.html