[Aide] different attributes (here3)

Richard van den Berg richard at vdberg.org
Sun Apr 5 15:02:15 EEST 2009


On 4/5/09 1:02 PM, Peter Jordan wrote:
> Ok, we have the solution. I do not store inode data on a debian unstable
> system because to much files changing their inode (creation and
> modification time) but not the content.

The inode is used to determine if a file has been renamed. I believe 
Debian has this on by default for /var/log. Without inodes in aide.db I 
am surprised you have not more of these warnings. Disabling the "I" 
option for all files should also fix the issue.

Regards,

Richard


More information about the Aide mailing list