[Pkg-aide-maintainers] Bug#642272: aide: (Optionally?) ignore	read-only ext2attrs
    A. N. Other 
    a.n.other.debian at gmail.com
       
    Tue Sep 20 23:46:56 UTC 2011
    
    
  
Package: aide
Version: 0.15.1-2+squeeze1
Severity: wishlist
Several of the attributes listed by the lsattr program are
"read-only" and cannot be changed by chattr; essentially,
these attributes represent diagnostics reported by the ext2
filesystem driver. To quote chattr(1):
  The following attributes are read-only, and may be listed
  by lsattr(1) but not modified by chattr: huge file (h),
  compression error (E), indexed directory (I), compression
  raw access (X), and compressed dirty file (Z).
Currently, the e2fsattrs check in aide will list changes to
these attributes too; it might make more sense for aide to
ignore these attributes, or at least to provide an option to
do so, as such changes are unlikely to be security-relevant.
    
    
More information about the Pkg-aide-maintainers
mailing list