On Wed, Dec 07, 2005 at 09:43:39AM +0200, Virolainen Pablo wrote: > On Wed, 7 Dec 2005, Marc Haber wrote: > >On Tue, Dec 06, 2005 at 01:24:34PM +0200, Virolainen Pablo wrote: > >>On Mon, 5 Dec 2005, Marc Haber wrote: > >>>>I cannot explain this without looking at the source. I know that > >>>>"...R}/var/backups" rule is not even checked. > >>> > >>>How do you find out? > >> > >>Well, I changed verbosity level to get debug messages (and added some > >>debug messages). > > > >Can you give a patch for these debug messages? I think it would be > >extremely handy to see which and how rules are considered. > > >That is a complete replacement for the gen_list.c function, and from > >what I see, it reverses from a first-match to a last-match approach by > >comparing the regexp list starting from the last node? > > I thaught you wanted to change the semantic to be like that.
Probably, yes. At the moment, the semantics don't seem to be defined in the man page, so it would be a probable start to say whether we are going for a first match or a last match. The examples in aide.conf(5) suggest a first-match approach. > For the patch, you should get something like following > > dump of the tree entries with data attachet to it. Data has line number, > type (like in config file) and the regexp. Line number of the config file? Do you suggest having that patch added to CVS, or is that only temporary for my convenience? Greetings Marc -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834 Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835 _______________________________________________ Aide mailing list Aide@cs.tut.fi https://mailman.cs.tut.fi/mailman/listinfo/aide