[Pkg-aide-maintainers] Bug#442214: Bug#442214: aide: Aide issues false alarms

Bill Wohler wohler at newt.com
Sun Jul 27 20:40:13 UTC 2008


Marc Haber <mh+debian-packages at zugschlus.de> wrote:

> Ah. now I understand. How about this:
> 
> Index: debian/aide-common.README.Debian
> ===================================================================
> --- debian/aide-common.README.Debian    (revision 758)
> +++ debian/aide-common.README.Debian    (working copy)
> @@ -106,11 +106,14 @@
>  handle logs that have been rotated multiple times. COPYNEWDB="no" is
>  the default because automatically copying the database unconditionally
>  (COPYNEWDB="yes") might be dangerous since detected changes are only
> -reported once. Additionally, if you do not manually increase the
> -verbosity level by setting (for example) AIDEARGE="-V5" in
> +reported once. If you use COPYNEWDB="yes" and do not manually increase
> +the verbosity level by setting (for example) AIDEARGE="-V5" in
>  /etc/default/aide, you lose the possibility of inspecting the changes
>  more closely. A third option, COPYNEWDB="ifnochange" only copies the
> -new database over the old one if aide has not detected any changes.
> +new database over the old one if aide has not detected any changes. In
> +this case, you need to manually copy over the databases after the
> +first report showing changes, or your ANF+ARF rules (including rotated
> +log files etc) are going to stop working.

Sehr gut! Die einzige Dinge ist s/AIDEARGE/AIDEARGS/ :-).

Danke schön.

-- 
Bill Wohler <wohler at newt.com>  http://www.newt.com/wohler/  GnuPG ID:610BD9AD





More information about the Pkg-aide-maintainers mailing list