[Aide] Naming of attribute groups in aide.conf

Marc Haber mh+aide at zugschlus.de
Thu Aug 18 17:18:23 EEST 2022


Hi,

I have been using aide for more than 20 years now, and for almost as
long, I maintain the aide rules that come with the Debian package.

In the package, we traditionally used attribute group names describing
the attributes, like, for example:

Checksums = H
OwnerMode = p+u+g+ftype
Size = s+b
InodeData = OwnerMode+n+i+Size+l+X
RamdiskData = InodeData-i
VarTime = InodeData+Checksums
VarInode = VarTime-i
VarDir = OwnerMode+n+i+X
VarDirInode = OwnerMode+n+X

Many of those names that have been in used for decades are misnomers. I
think this could be easier to understand with a new naming scheme.

I think it might be better if our attribute group names would actually
describe what a file is being used for, like we have in part for log
files already:

Log = OwnerMode+n+S+X
LowLog = Log-S
SerMemberLog  = Full+I
LoSerMemberLog = SerMemberLog+ANF
HiSerMemberLog = SerMemberLog+ARF

What kind of things do we need to find rules for?

I have come up with the following

RandomAccessDataFile, StateFile - a file that changes contents and mtime
randomly during normal operation of the system, such as an sqlite data
file, a virus pattern file, an apt Packages file, or an aide database
file

GrowingDataFile (alias: Log) - a file that grows, and once written, the
beginning of the file never changes. aide does not have a way to express
this yet, so this would probably start off as being an alias for
RandomAccessDataFile

TransientDataFile, TemporaryDataFile, PidFile, LockFile - a file that
appears and vanishes as necessary, and changes it contents during its
existence.

AppearingDataFile - a file that appears, but once present, does not
change contents.

TransientMarkerFile - a file that appears and vanishes as
necessary, but if present, does not change contents.

GeneratedConfigFile - a file that gets recreated every time the system
boots or a service is restarted, but does not change contents (Compiled
and generated configuration in /run).

DataDir - A directory that contain a fixed number of files, but the
files in the directory change

ChangingDataDir - A directory that contains an ever changing number of
files

RunDir - A directory in /run that gets recreated every time the system
boots

What did I miss? I'd like to hear your input.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421


More information about the Aide mailing list