Marc Haber <[EMAIL PROTECTED]> wrote: > Ah. now I understand. How about this: > > Index: debian/aide-common.README.Debian > =================================================================== > --- debian/aide-common.README.Debian (revision 758) > +++ debian/aide-common.README.Debian (working copy) > @@ -106,11 +106,14 @@ > handle logs that have been rotated multiple times. COPYNEWDB="no" is > the default because automatically copying the database unconditionally > (COPYNEWDB="yes") might be dangerous since detected changes are only > -reported once. Additionally, if you do not manually increase the > -verbosity level by setting (for example) AIDEARGE="-V5" in > +reported once. If you use COPYNEWDB="yes" and do not manually increase > +the verbosity level by setting (for example) AIDEARGE="-V5" in > /etc/default/aide, you lose the possibility of inspecting the changes > more closely. A third option, COPYNEWDB="ifnochange" only copies the > -new database over the old one if aide has not detected any changes. > +new database over the old one if aide has not detected any changes. In > +this case, you need to manually copy over the databases after the > +first report showing changes, or your ANF+ARF rules (including rotated > +log files etc) are going to stop working.
Sehr gut! Die einzige Dinge ist s/AIDEARGE/AIDEARGS/ :-). Danke schön. -- Bill Wohler <[EMAIL PROTECTED]> http://www.newt.com/wohler/ GnuPG ID:610BD9AD -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]