[Aide] (no subject)
davidski-ai at deadheaven.com
davidski-ai at deadheaven.com
Mon Oct 8 18:44:11 EEST 2007
Good morning, all.
I'm running Aide 0.11 on a FreeBSD 6.2 system (compiled via the ports tree).
I have a number of files that keep being checked for inode number changes
(+i) despite my best efforts to have aide ignore this check. The relevant
portions of my aide.conf file are:
#Custom log template without inode number check
MyLogs = p+n+u+g-s-a-m-md5-tiger-rmd160-sha1-i
=/$ L
#Monitor all of /usr/local/etc, but ignore changing inodes on tinydns log
files
/usr/local/etc L
!/usr/local/etc/.*/log/main/@.*\.s$ L
=/usr/local/etc/dnscachex-lo1/log/main/current$ MyLogs
=/usr/local/etc/dnscachex-lo2/log/main/current$ MyLogs
=/usr/local/etc/tinydns/log/main/current$ MyLogs
=/usr/local/etc/tinydns-int/log/main/current$ MyLogs
Despite ensuring that I've run with -init and copying the resulting database
over, I'm still receiving change reports such as the following:
File: /usr/local/etc/dnscachex-lo1/log/main/current
Inode : 10174514 , 10174704
File: /usr/local/etc/dnscachex-lo2/log/main/current
Inode : 12388508 , 12388362
File: /usr/local/etc/tinydns/log/main/current
Inode : 12389307 , 12389090
File: /usr/local/etc/tinydns-int/log/main/current
Inode : 12388925 , 12388866
I seem to recall seeing some bug reports of problems with +i under 0.11, but
I'm unable to find any entries in the archives to verify this. Is there
something in my configuration that is causing this behavior or is this a
known problem?
Thanks for the help,
David
More information about the Aide
mailing list