[Aide] (no subject)

davidski-ai at deadheaven.com davidski-ai at deadheaven.com
Mon Oct 8 18:44:11 EEST 2007


Good morning, all.

I'm running Aide 0.11 on a FreeBSD 6.2 system (compiled via the ports tree).
I have a number of files that keep being checked for inode number changes
(+i) despite my best efforts to have aide ignore this check.  The relevant
portions of my aide.conf file are:

#Custom log template without inode number check
MyLogs = p+n+u+g-s-a-m-md5-tiger-rmd160-sha1-i

=/$             L

#Monitor all of /usr/local/etc, but ignore changing inodes on tinydns log
files
/usr/local/etc                                                  L
!/usr/local/etc/.*/log/main/@.*\.s$                             L
=/usr/local/etc/dnscachex-lo1/log/main/current$                 MyLogs
=/usr/local/etc/dnscachex-lo2/log/main/current$                 MyLogs
=/usr/local/etc/tinydns/log/main/current$                       MyLogs
=/usr/local/etc/tinydns-int/log/main/current$                   MyLogs

Despite ensuring that I've run with -init and copying the resulting database
over, I'm still receiving change reports such as the following:

File: /usr/local/etc/dnscachex-lo1/log/main/current
  Inode    : 10174514                          , 10174704


File: /usr/local/etc/dnscachex-lo2/log/main/current
  Inode    : 12388508                          , 12388362


File: /usr/local/etc/tinydns/log/main/current
  Inode    : 12389307                          , 12389090


File: /usr/local/etc/tinydns-int/log/main/current
  Inode    : 12388925                          , 12388866

I seem to recall seeing some bug reports of problems with +i under 0.11, but
I'm unable to find any entries in the archives to verify this.  Is there
something in my configuration that is causing this behavior or is this a
known problem?

Thanks for the help,

David



More information about the Aide mailing list