[Aide] Intrusion report of directory files

[Vijay]

Try "!/opt/SomeSoftware/tmp" without the quotes.

V

On Mon, Jun 6, 2011 at 3:49 AM, oliver.k at bluewin.ch <oliver.k at bluewin.ch> wrote:
> Hi all
>
> I'm pretty new to AIDE and tried for a while to get along with the configuration.
>
> I have made a rule like
> this:
>
> RULE=p+i+n+u+g+s+m+md5
>
> and use this rule on the directory path /opt
>
> /opt RULE
>
> My problem are some scripts
> that write temporary files in the directory somewhere in /opt/.../... and by this behavior it causes aide do report an
> intrusion because of the mtime check. Does anyone have an idea how I can solve that problem? I don't want to remove the
> mtime check. My thoughts go to the direction of excluding the mtime check for all directory files, is that possible?
>
>
> Thank you for your time and help
>
> _______________________________________________
> Aide mailing list
> Aide at cs.tut.fi
> https://mailman.cs.tut.fi/mailman/listinfo/aide
>