[Aide] Welcome to the "Aide" mailing list
Richard van den Berg
richard at vdberg.org
Fri Mar 23 08:22:03 EET 2012
On 23 mrt. 2012, at 05:49, Marek Dohojda <chrobry at gmail.com> wrote:
> I am running AIDE 0.14 on centos from base repositories. everything is working fine till I run check. what I did to test was to run touch /bin/ls. then I run aide --check. After it finished it updated time stamp on the /bin directory itself. to ensure this is a problem, I rerun this with same results. I tied another directory and different server with same results. I am sure I am missing something stupid, but could someone please me a hint?
Aide does not change the ctime or mtime of anything it scans. Only the atime which is not checked or reported by aide. There must be another mechanism on your OS responsible for this.
Richard
More information about the Aide
mailing list