[Pkg-aide-maintainers] Bug#442214: Bug#442214: Bug#442214: aide: Aide issues false alarms

[Marc Haber]

On Fri, Sep 21, 2007 at 02:58:30PM +0200, Andreas Tille wrote:
> On Fri, 21 Sep 2007, Marc Haber wrote:
>> As a rule, if you once get a report that shows changes, you'll get all
>> log reported as changed the next day if you don't interfere manually.
>
> Well, is the following procedure:
>
> -----------------------------------------------------------
> # /usr/sbin/aideinit
> Overwrite existing /var/lib/aide/aide.db.new [Yn]? y
> Running aide --init...
>
> AIDE, version 0.13.1
>
> ### AIDE database at /var/lib/aide/aide.db.new initialized.
>
> Overwrite /var/lib/aide/aide.db [yN]? y
> ----------------------------------------------------------
>
> what you would call "interfere manually"?

Depending on your level of paranoia, it might be sufficient to
manually copy over /var/lib/aide/aide.db.new to /var/lib/aide/aide.db.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835