Re: [Aide] Rules to exclude all files except one

2015-11-19 Thread Brian Mathis
Thanks for the reply (glad this list isn't completely dead), but I think it's pretty clear that I said "all files/dirs in a subdirectory" and "without itemizing every file to exclude". This indicates that a specific include/exclude is explicitly not what I'm looking for, as the list of things to

Re: [Aide] Rules to exclude all files except one

2015-11-19 Thread Richard Dupuy
The more I looked, this might be necessary: !/opt/app/dir/[^o] !/opt/app/dir/[^o][^n] !/opt/app/dir/[^o][^n][^e] !/opt/app/dir/[^o][^n][^e][^d] !/opt/app/dir/[^o][^n][^e][^d][^i] !/opt/app/dir/[^o][^n][^e][^d][^i][^r]

Re: [Aide] Rules to exclude all files except one

2015-11-19 Thread Richard Dupuy
OK, to be thorough: !/opt/app/dir/[^o] !/opt/app/dir/[^o][^n] !/opt/app/dir/[^o][^n][^e] !/opt/app/dir/[^o][^n][^e][^d] !/opt/app/dir/[^o][^n][^e][^d][^i] !/opt/app/dir/[^o][^n][^e][^d][^i][^r] !/opt/app/dir/[^o][^n][^e][^d][^i][^r][^/].*

Re: [Aide] Rules to exclude all files except one

2015-11-19 Thread Richard Dupuy
I've done something like this with some success: !/opt/app/dir/[^o][^n][^e][^d][^i][^r][^/] You might play around with find and grep/egrep to find the "just right" regular expression... I've played this game of "exclude all but..." with regular expressions before. It's very ugly, but

Re: [Aide] Rules to exclude all files except one

2015-11-19 Thread Jobst Schmalenbach
Wouldn't it be !/opt/app/dir /opt/app/dir/onefile Jobst -- Sent from my Mobile. On 19 November 2015 7:29:46 PM AEDT, Brian Mathis wrote: >Thanks for the reply (glad this list isn't completely dead), but I >think >it's pretty clear that I said "all

Re: [Aide] Rules to exclude all files except one

2015-11-19 Thread Shirkdog
That was the reason for my response, pretty sure your issue has come up before, and I have worked around it by automating that process outside of aide. It is something it should be able to handle, a global white-list of some kind for the values you do not want to check. --- Michael Shirk On

Re: [Aide] Rules to exclude all files except one

2015-11-19 Thread Brian Mathis
No, that doesn't work because the ! rule still matches the onefile rule, so it is excluded. This can be seen when running with -V250: "/opt/app/dir" matches rule from line #131: ^/opt/app/dir /opt/app/dir match=0, tree=0x7fc395d8f780, attr=0 "/opt/app/dir/onefile" matches rule from