[Pkg-aide-maintainers] Bug#442214: aide: Aide issues false alarms

[Francois Gouget]

Marc Haber wrote:
> In a previous run, aide detected changes (most probably the zope log
> file), and thus the newly generated database was not copied over the
> old one. After the next log rotation, the log-related rules didn't
> apply any more and you got the report quoted above.

So it's necessary to get a clean run to not get things to degenerate. 
Ouch. That's going to be pretty hard given how incomplete the default 
aide configuration files are.

I also don't understand why ifnochange is not the default since, as it 
is and with the rules that aide ships with, using anything else will 
result in the administrator being deluged with false positives 
(essentially every single Debian package's log files will be reported in 
short order).

-- 
Francois Gouget <fgouget at free.fr>              http://fgouget.free.fr/
                              145 = 1! + 4! + 5!