Your database (/home/aide-0.9/src/aide.db) does not yet include the files in /sbin/ (I guess it is still entirely empty). The --check command only checks the current state of the filesystem against this database, but does not update it. You should run the --update command, which does the same as --check but additionally also writes a new database. If all the changes reported are ok, you would then replace the database checks are done agains (/home/aide-0.9/src/aide.db) with the newly generated one (/home/aide-0.9/src/aide.db.new) and the files won't be reported any more as added.
On Wed, Nov 05, 2003 at 08:59:06AM -0800, rajasekhar atchutuni wrote: > Hi, > We are first time users and trying to run the aide-0.9 version on Suse 8 enterprise > linux, and whenever I use the check command it adds instead of showing me the files > changed. Can someone tell me if there is anything wrong I am doing. Below is the > aide.conf and the output of the check command > > ------------------------------------------------------------- > Aide.conf > > database=file:/home/aide-0.9/src/aide.db > database_out=file:/home/aide-0.9/src/aide.db.new > /sbin p > > -------------------------------------------------------------- > Output of the check command > ./aide --config=./aide.conf --check > > Only one @@dbspec in inputdatabase. > Filedatabase must have one db_spec spesification > Filedatabase must have one db_spec spesification > added:/sbin > added:/sbin/conf.d > added:/sbin/conf.d/SuSEconfig.libxml2 [...cut...]
