[Aide] Aide summary output ?

Hannes von Haugwitz hannes at vonhaugwitz.com
Mon Oct 18 09:06:12 EEST 2010


On Mon, Oct 18, 2010 at 09:20:06AM +0800, Aaron Lewis wrote:
> Hi,
> 	As document for aide.conf says , if i put summarize_changes as yes , it
> should output some human readable reports , rather than "xxx has
> different attributes    bla bla" , but it just don't work here.

The summarize_changes feature summarizes the changes of an entry in the
added, removed and changed files sections of the report.

For instance it changes the line

changed: /path/to/file

to

f >b... mc..C . .: /path/to/file

To decode hex-encoded attribute numbers you can use the
aide-attributes.sh script in the contrib/ directory of the source
tarball.

Below are two examples from the Debian man page of aide-attributes:

EXAMPLES
       Decode the hex number 'c3d' to attribute names:
              $ aide-attributes c3d
              filename
              perm
              uid
              gid
              size
              bcount
              lnkcount

       Display the differences between two hex-encoded attribute numbers:
              $ aide-attributes c3d fbd
              +ctime
              +mtime
              +inode

Greetings

Hannes


More information about the Aide mailing list