[Pkg-aide-maintainers] Bug#442214: Bug#442214: aide: Aide issues false alarms
Bill Wohler
wohler at newt.com
Sun Jul 27 20:40:13 UTC 2008
Marc Haber <mh+debian-packages at zugschlus.de> wrote:
> Ah. now I understand. How about this:
>
> Index: debian/aide-common.README.Debian
> ===================================================================
> --- debian/aide-common.README.Debian (revision 758)
> +++ debian/aide-common.README.Debian (working copy)
> @@ -106,11 +106,14 @@
> handle logs that have been rotated multiple times. COPYNEWDB="no" is
> the default because automatically copying the database unconditionally
> (COPYNEWDB="yes") might be dangerous since detected changes are only
> -reported once. Additionally, if you do not manually increase the
> -verbosity level by setting (for example) AIDEARGE="-V5" in
> +reported once. If you use COPYNEWDB="yes" and do not manually increase
> +the verbosity level by setting (for example) AIDEARGE="-V5" in
> /etc/default/aide, you lose the possibility of inspecting the changes
> more closely. A third option, COPYNEWDB="ifnochange" only copies the
> -new database over the old one if aide has not detected any changes.
> +new database over the old one if aide has not detected any changes. In
> +this case, you need to manually copy over the databases after the
> +first report showing changes, or your ANF+ARF rules (including rotated
> +log files etc) are going to stop working.
Sehr gut! Die einzige Dinge ist s/AIDEARGE/AIDEARGS/ :-).
Danke schön.
--
Bill Wohler <wohler at newt.com> http://www.newt.com/wohler/ GnuPG ID:610BD9AD
More information about the Pkg-aide-maintainers
mailing list