Richard van den Berg
Sun, 05 Apr 2009 05:03:00 -0700
On 4/5/09 1:02 PM, Peter Jordan wrote: > Ok, we have the solution. I do not store inode data on a debian unstable > system because to much files changing their inode (creation and > modification time) but not the content.
The inode is used to determine if a file has been renamed. I believe Debian has this on by default for /var/log. Without inodes in aide.db I am surprised you have not more of these warnings. Disabling the "I" option for all files should also fix the issue. Regards, Richard _______________________________________________ Aide mailing list Aide@cs.tut.fi https://mailman.cs.tut.fi/mailman/listinfo/aide