On Tue, 8 Jun 2004 06:36:56 +0200 (CEST) "Roger Grosswiler" <[EMAIL PROTECTED]> wrote:
> usually, the the output of irrelevant entries can be done by not checking those. so > in your /etc/aide.conf just place > a ! in front of the disliked entry. i.e. !/tmp will neither check nor output any > result of a check of your tmp-dir. > If possible, I wouldn't recommend completely excluding something if at all feasible. While it may be necessary to !/tmp on a multiuser system, if one can monitor fewer attributes to remove the noise without losing some monitoring that may be preferable. John
