[Aide] (no subject)

[Bob Hutchinson]

On Monday 08 October 2007 16:44, davidski-ai at deadheaven.com wrote:
> Good morning, all.
>
> I'm running Aide 0.11 on a FreeBSD 6.2 system (compiled via the ports
> tree). I have a number of files that keep being checked for inode number
> changes (+i) despite my best efforts to have aide ignore this check.  The
> relevant portions of my aide.conf file are:

I use something like

!/var/log/(dnscache|tinydns)/(@[0-9a-f]..|current)

>
> #Custom log template without inode number check
> MyLogs = p+n+u+g-s-a-m-md5-tiger-rmd160-sha1-i
>
> =/$             L
>
> #Monitor all of /usr/local/etc, but ignore changing inodes on tinydns log
> files
> /usr/local/etc                                                  L
> !/usr/local/etc/.*/log/main/@.*\.s$                             L
> =/usr/local/etc/dnscachex-lo1/log/main/current$                 MyLogs
> =/usr/local/etc/dnscachex-lo2/log/main/current$                 MyLogs
> =/usr/local/etc/tinydns/log/main/current$                       MyLogs
> =/usr/local/etc/tinydns-int/log/main/current$                   MyLogs
>
> Despite ensuring that I've run with -init and copying the resulting
> database over, I'm still receiving change reports such as the following:
>
> File: /usr/local/etc/dnscachex-lo1/log/main/current
>   Inode    : 10174514                          , 10174704
>
>
> File: /usr/local/etc/dnscachex-lo2/log/main/current
>   Inode    : 12388508                          , 12388362
>
>
> File: /usr/local/etc/tinydns/log/main/current
>   Inode    : 12389307                          , 12389090
>
>
> File: /usr/local/etc/tinydns-int/log/main/current
>   Inode    : 12388925                          , 12388866
>
> I seem to recall seeing some bug reports of problems with +i under 0.11,
> but I'm unable to find any entries in the archives to verify this.  Is
> there something in my configuration that is causing this behavior or is
> this a known problem?
>
> Thanks for the help,
>
> David
>
> _______________________________________________
> Aide mailing list
> Aide at cs.tut.fi
> https://mailman.cs.tut.fi/mailman/listinfo/aide

-- 
-----------------
Bob Hutchinson
Midwales dot com
-----------------