[Aide] Monitoring files copy to an USB key

[Hannes von Haugwitz]

On Tue, Nov 07, 2023 at 09:34:14AM +0000, s4il0r wrote:
> AIDE seems to be very great for this, except that it haven't find how
> to run a check when a file is copied to an usb key.
>
> Does someone have a clue ?
>
> Or perhaps there is a better tool for my needs ?

AIDE is designed to run on a daily (or weekly) basis to report changes
in the file system. aide has no daemon mode to monitor file system
events.

To monitor and act upon filesystem events you can use inotify-tools (see
`inotifywait` and `inotifywatch` commands).

Best regards

Hannes

[0] https://github.com/inotify-tools/inotify-tools/wiki