Richard van den Berg
Tue, 18 May 2010 23:48:34 -0700
On Wed, 19 May 2010 08:10:43 +0200, Pedro Sanchez <pedro.sanche...@gmail.com> wrote: > This software was inside a directory named ... ( three following points) > This name makes the directory invisible for aide, so we have no > knowing of this filesystem modification.
What was the full path of the directory where the software was installed? Was aide configured to scan a top level directory recursively? Aide will definitely find a directory named ... and all files installed in it when configured correctly: @@begin_db # This file was generated by Aide, version post-0.14 # Time of generation was 2010-05-19 08:39:26 @@db_spec name lname attr perm bcount uid gid size mtime ctime inode lcount md5 /tmp/bar 0 4029 40755 0 1000 1000 60 MTI3NDI1MTEyOQ== MTI3NDI1MTEyOQ== 10183511 3 0 /tmp/bar/... 0 4029 40755 0 1000 1000 60 MTI3NDI1MTEzOQ== MTI3NDI1MTEzOQ== 10183515 2 0 /tmp/bar/.../foo 0 8125 100644 0 1000 1000 0 MTI3NDI1MTEzOQ== MTI3NDI1MTEzOQ== 10183526 1 1B2M2Y8AsgTpgAmY7PhCfg== Cheers, Richard _______________________________________________ Aide mailing list Aide@cs.tut.fi https://mailman.cs.tut.fi/mailman/listinfo/aide