<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-size:small;color:#000000">Thanks, your response did help; hence, As closure of this thread, I've decided to share how I got all this to work on CentOS7, but should (could) also work on RHEL, Fedora and Oracle Linux. </div><div class="gmail_default" style="font-size:small;color:#000000"><br></div><div class="gmail_default" style="font-size:small;color:#000000">Admin Notes:- </div><div class="gmail_default" style="font-size:small;color:#000000"><br></div><div class="gmail_default" style="font-size:small;color:#000000">I did get acl attribute to work but still could NOT get xattr attribute to be accepted in aide.conf; (work around towards success - removed xattr from aide.conf).</div><div class="gmail_default" style="font-size:small;color:#000000">I also checked config.log and I can see that support check for xattr resulted as "yes". </div><div class="gmail_default" style="font-size:small;color:#000000"><br></div><div class="gmail_default" style="font-size:small;color:#000000">Step1: Install all dependencies - (beign way over greedy here; but depending on your system's current state, you might already have some of these installed, in that case yum will anyway ignore that package from the list. Just in case you still see errors, review config.log and resolve it)</div><div class="gmail_default" style="font-size:small;color:#000000"><br></div><div class="gmail_default" style="font-size:small;color:#000000">
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:18px;line-height:normal;font-family:"Courier New";color:rgb(46,255,18);background-color:rgba(0,0,0,0.72)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">sudo yum install -y bison flex pcre pcre-devel.x86_64 zlib zlib-devel.x86_64 libgcrypt-devel.x86_64 libgcrypt.x86_64 mhash-devel.x86_64 libcryptui-devel.x86_64 gettext-0.19.8.1-2.el7.x86_64 </span><span style="font-variant-ligatures:no-common-ligatures">glibc glibc-devel </span><span style="font-variant-ligatures:no-common-ligatures">glibc-static </span><span style="font-variant-ligatures:no-common-ligatures">libacl libacl-devel </span><span style="font-variant-ligatures:no-common-ligatures">libselinux libselinux-devel </span></p>
</div></div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)"></div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Step2: ran configure script with these options - </div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)"><br></div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:18px;line-height:normal;font-family:"Courier New";color:rgb(46,255,18);background-color:rgba(0,0,0,0.72)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">./configure --with-zlib --with-posix-acl --with-xattr --without-mhash --with-selinux --disable-static --with-gcrypt</span></p></div><div><br></div><div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Step3: make (if make throws fatal or ld errors, It'd be good to resolve and rerun make, before "make install").</div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Step4: "sudo make install"</div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)"><br></div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Validations:-</div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Step5: aide --version</div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Step6: "sudo aide --init" (assumption : you already have a valid aide.conf present at the path listed for CONFIG in above command"</div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Step7: Rename aide.db.new file to aide.db </div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Step8: Make a change in a directory which is monitored under aide.conf</div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Step9: "sudo aide --check"</div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)"><br></div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Review results - job done. </div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)"><br></div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Thanks again Richard.</div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)"><br></div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Regards,</div><div class="gmail_default" style="font-size:small;color:rgb(0,0,0)">Nutan</div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, 19 Jan 2020 at 15:30, <<a href="mailto:aide-request@ipi.fi">aide-request@ipi.fi</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Send Aide mailing list submissions to<br>
<a href="mailto:aide@ipi.fi" target="_blank">aide@ipi.fi</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://www.ipi.fi/mailman/listinfo/aide" rel="noreferrer" target="_blank">https://www.ipi.fi/mailman/listinfo/aide</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:aide-request@ipi.fi" target="_blank">aide-request@ipi.fi</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:aide-owner@ipi.fi" target="_blank">aide-owner@ipi.fi</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Aide digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: AIDE init error for acl and gzip support (Nutan Vishwakarma)<br>
2. Re: AIDE init error for acl and gzip support<br>
(Richard van den Berg)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Sun, 19 Jan 2020 01:34:40 +0530<br>
From: Nutan Vishwakarma <<a href="mailto:nutan.vishwakarma@gmail.com" target="_blank">nutan.vishwakarma@gmail.com</a>><br>
To: <a href="mailto:aide@ipi.fi" target="_blank">aide@ipi.fi</a><br>
Subject: Re: [Aide] AIDE init error for acl and gzip support<br>
Message-ID:<br>
<CACC=oqEetoFzVpUZFH9z4-Kqvbo9gG=<a href="mailto:W9Qy4QUsjAofY6WZYrg@mail.gmail.com" target="_blank">W9Qy4QUsjAofY6WZYrg@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hi,<br>
<br>
Sorry, this took way too long to get back. Here is what I was trying to do<br>
and get an error with attribute "acl" when I use it against a directory.<br>
<br>
I am trying to test latest available version of aide, on CentOS 7 and not<br>
all dependencies are available via yum, so I installed a few manually in<br>
non standard paths.<br>
<br>
<br>
*sudo yum install -y bison flex pcre-devel.x86_64 zlib-devel.x86_64<br>
libgcrypt-devel.x86_64 libgcrypt.x86_64 mhash-devel.x86_64<br>
libcryptui-devel.x86_64 gettext-0.19.8.1-2.el7.x86_64./configure<br>
--with-zlib=/home/nutan/aide/zlib-1.2.11/ --disable-static*<br>
<br>
<br>
Configure script succeeded when ran with zlib (resolve libz requirement)<br>
and disabled static.<br>
aide is now running -<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
*[nutan@aide aide-0.16.2]$ aide --versionAide 0.16.2Compiled with the<br>
following<br>
options:WITH_MMAPWITH_PCREWITH_LSTAT64WITH_READDIR64WITH_MHASHCONFIG_FILE =<br>
"/usr/local/etc/aide.conf"[nutan@aide aide-0.16.2]$ *<br>
<br>
<br>
NOW, the problem area -<br>
<br>
I created a aide.conf file and add following to it -<br>
<br>
*[nutan@aide rtest]$ sudo more /usr/local/etc/aide.conf*<br>
<br>
*database=file:/var/lib/aide/aide.db*<br>
<br>
*database_out=file:/var/lib/aide/aide.db.new*<br>
<br>
*database_new=file:/var/lib/aide/aide.db.new*<br>
<br>
*gzip_dbout=yes*<br>
<br>
<br>
*summarize_changes=no*<br>
<br>
<br>
*grouped=yes*<br>
<br>
<br>
*verbose = 10*<br>
<br>
<br>
*report_base16 = no*<br>
<br>
<br>
*Checksums = sha512+tiger*<br>
<br>
<br>
*# The checksums of the databases to be printed in the report*<br>
<br>
*# Set to 'E' to disable.*<br>
<br>
*database_attrs = Checksums*<br>
<br>
<br>
*# check test direcotry *<br>
<br>
*/home/nutan/aide/rtest p+n+u+g+s+acl+selinux+xattrs+md5+sha256+sha512*<br>
<br>
*[nutan@aide rtest]$ *<br>
<br>
<br>
when "aide --init" is run, then I see error of expression.<br>
<br>
[nutan@aide rtest]$ aide --init<br>
Gzip-support not compiled in.<br>
21:Error in expression:acl<br>
Configuration error<br>
[nutan@aide rtest]$<br>
<br>
<br>
If I remove "acl" from attributes list, then I see same error for xattrs.<br>
When I remove xattrs too, I get aide to initialize for the first time as<br>
expected.<br>
<br>
Is this because of build steps?? I'll atleast need acl to be part of the<br>
attributes list.<br>
<br>
Help Please...!!<br>
<br>
<br>
Thanks,<br>
Nutan<br>
<br>
On Tue, 12 Nov 2019 at 10:59, Nutan Vishwakarma <<a href="mailto:nutan.vishwakarma@gmail.com" target="_blank">nutan.vishwakarma@gmail.com</a>><br>
wrote:<br>
><br>
><br>
>> Hi,<br>
>><br>
>> I compiled aide-0.16.2 which these options -<br>
>><br>
>> ./configure --with-zlib=/home/nutan/zlib-1.2.11/ --disable-static<br>
>><br>
>><br>
>> and it compiled well, but at the time of aide --init or --check, I get<br>
error for using gzip_dbout=yes and AUDIT = p+u+g+sha512+acl<br>
>> in my aide.conf file.<br>
>><br>
>> When I check version, it does not show WITH_ZLIB -<br>
>><br>
>> Aide 0.16.2<br>
>><br>
>><br>
>> Compiled with the following options:<br>
>><br>
>><br>
>> WITH_MMAP<br>
>><br>
>> WITH_PCRE<br>
>><br>
>> WITH_LSTAT64<br>
>><br>
>> WITH_READDIR64<br>
>><br>
>> WITH_MHASH<br>
>><br>
>> CONFIG_FILE = "/usr/local/etc/aide.conf"<br>
>><br>
>><br>
>><br>
>> Any idea what could be going wrong ? I also need to get "acl" working.<br>
>><br>
>> thanks,<br>
>> Nutan<br>
>><br>
<br>
<br>
-- <br>
Er Nutan Vishwakarma<br>
Mob: 07893212071<br>
P<br>
Please consider your environmental responsibility:<br>
Before printing this e-mail, ask yourself whether you need a hard copy.<br>
GO GREEN.....I am Doing my BIT.<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://www.ipi.fi/pipermail/aide/attachments/20200119/d34c6d2b/attachment-0001.html" rel="noreferrer" target="_blank">http://www.ipi.fi/pipermail/aide/attachments/20200119/d34c6d2b/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Sat, 18 Jan 2020 21:57:19 +0100<br>
From: Richard van den Berg <<a href="mailto:richard@vdberg.org" target="_blank">richard@vdberg.org</a>><br>
To: Aide user mailinglist <<a href="mailto:aide@ipi.fi" target="_blank">aide@ipi.fi</a>><br>
Subject: Re: [Aide] AIDE init error for acl and gzip support<br>
Message-ID: <<a href="mailto:cc39f5eb-0ccb-e018-d381-ff260d6d9afb@vdberg.org" target="_blank">cc39f5eb-0ccb-e018-d381-ff260d6d9afb@vdberg.org</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
On 18/01/2020 21:04, Nutan Vishwakarma wrote:<br>
> I am trying to test latest available version of aide, on CentOS 7 and<br>
> not all dependencies are available via yum, so I installed a few<br>
> manually in non standard paths.<br>
><br>
> /sudo yum install -y bison flex pcre-devel.x86_64 zlib-devel.x86_64<br>
> libgcrypt-devel.x86_64 libgcrypt.x86_64 mhash-devel.x86_64<br>
> libcryptui-devel.x86_64 gettext-0.19.8.1-2.el7.x86_64<br>
> ./configure --with-zlib=/home/nutan/aide/zlib-1.2.11/ --disable-static/<br>
<br>
<br>
Why use --with-zlib in a local directory when you have zlib-devel<br>
installed? Use --with-zlib without an argument should be enough.<br>
<br>
<br>
> when "aide --init" is run, then I see error of expression.<br>
><br>
> [nutan@aide rtest]$ aide --init<br>
> Gzip-support not compiled in.<br>
> 21:Error in expression:acl<br>
> Configuration error<br>
> [nutan@aide rtest]$ <br>
><br>
<br>
Aide is complaing that gzip (zlib) and acl support are not available.<br>
ACL support should be available by running configure --with-posix-acl<br>
and xattr using --with-xattr<br>
<br>
Check your config.log to see why configure cannot find your zlib-devel<br>
files.<br>
<br>
Kind regards,<br>
<br>
Richard<br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://www.ipi.fi/pipermail/aide/attachments/20200118/6d9b6571/attachment-0001.html" rel="noreferrer" target="_blank">http://www.ipi.fi/pipermail/aide/attachments/20200118/6d9b6571/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
Aide mailing list<br>
<a href="mailto:Aide@ipi.fi" target="_blank">Aide@ipi.fi</a><br>
<a href="https://www.ipi.fi/mailman/listinfo/aide" rel="noreferrer" target="_blank">https://www.ipi.fi/mailman/listinfo/aide</a><br>
<br>
<br>
------------------------------<br>
<br>
End of Aide Digest, Vol 27, Issue 1<br>
***********************************<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><span style="font-family:"Trebuchet MS";color:rgb(0,0,255);font-size:13px"><span style="font-family:Webdings;color:green;font-size:24pt"><b>
<div><span style="font-size:small"><font face="georgia, serif"><font color="#000066">Er Nutan Vishwakarma</font></font></span></div>
<div><span style="font-size:small"><font face="tahoma, sans-serif"><font color="#000066">Mob: 07893212071</font></font></span></div>
<div><span style="font-size:small"></span>P</div></b></span><span style="color:blue"><font size="1"> </font></span><span style="font-family:"Book Antiqua",serif;color:green"><font size="1">Please consider your environmental responsibility:<br>Before printing this e-mail, ask yourself whether you need a hard copy.</font></span></span><br><font face="georgia, serif"><font color="#006600">GO GREEN.....I am Doing my BIT.</font></font><br><br></div></div>