[Aide] Monitoring authorized_keys

[shawn wilson]

How do I get AIDE to monitor the ssh authorized_keys file for all users
(and nothing else under /home)?

Basically:
/home/*/.ssh/authorized_keys

So I've tried (at the bottom so that nothing else can clobber it):
/home/.*/.ssh/authorized_keys NORMAL

And I zgrep the db for authorized_keys (or a username) and I don't see
anything.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.cs.tut.fi/pipermail/aide/attachments/20160317/eaf325a5/attachment.html>