[Aide] Permission denied when scanning readable directory below unreadable directory
Keith Constable
kccricket at gmail.com
Thu Jul 5 23:16:36 EEST 2012
0 down vote favorite
I would like to use AIDE to help me verify the integrity of my home directory on
a shared Linux system. I am not an administrator of this system. I have built
and installed AIDE in my home directory and it seems to work properly.
The sysadmin has set permissions on /home to 0751. This allows users to enter
/home, but not list the contents of the directory (an ineffective security
measure, in my opinion).
For demonstration purposes, consider this overly simple aide.conf:
database_out=file:aide.db.new
/home/kccricket R
Given this setup, running aide -i will output:
open_dir():Permission denied: /home
AIDE, version 0.15.1
### AIDE database at aide.db.new initialized.
The resulting AIDE database will be empty. If I run the same command with -V255
(highest verbosity), I can see that AIDE examines every directory in / and then
attempts to do the same with /home. It chokes because it can't list the contents
of /home.
Is there a way to make this work, short of asking the sysadmin to change the
perms on /home?
Regards,
Keith Constable
More information about the Aide
mailing list