[Aide] Does AIDE traverse Linux symlinks?

[John Jamerson]

Setup:  RHEL8 environment.  On 50+ servers there is a cron'd AIDE process
for a particular application's directory tree that produces a report which
is then emailed.

 

Situation:  /data/app/bin/file is a link that points at
/releases/app/bin/file. In other words: ls -l yields /data/app/bin/file >
releases/app/bin/file

 

Changes (add/delete/modify) in the latter directory (/releases/app/bin/*)
are not picked up by the AIDE process.

 

Other applications that do not use symlinks?  AIDE picks up any/all changes

 

If AIDE, by design, traverses Linux symlinks, perhaps there's an
/etc/aide.conf option I've missed or misconfigured?

 

man ages for aide and aide.conf discuss links but only in the context of
ACL's.  No ACL's are being used.

 

Extensive Google searches have not helped at all.

 

Ideas/clues?  What am I missing?  TIA.

 

John Jamerson

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.ipi.fi/pipermail/aide/attachments/20230408/68bf16ac/attachment.html>