Here's my rules: /bin R /boot R !/etc$ !/etc/cups/certs R !/etc/cups/certs/0 R !/etc/random-seed$ !/etc/ld.so.cache$ !/etc/printcap$ !/etc/blkid.tab$ !/etc/ioctl.save$ !/etc/mtab$ !/etc/motd$ !/etc/cups/cupsd.conf$ !/etc/cups/printers.conf$ !/etc/cups/classes.conf$ !/etc/cups/ppd$ !/etc/cup$ /etc R /lib R /sbin R /usr/bin R /usr/local/bin R /usr/local/etc R /usr/local/lib R /usr/local/sbin R /usr/sbin R =/var/log R !/tmp/.s.PGSQL* !/tmp$ /tmp R !/var/tmp$ /var/tmp R
And here is what aide -i has to say about them: open_dir():Not a directory: /etc/motd open_dir():Not a directory: /etc/mtab open_dir():Not a directory: /etc/ioctl.save open_dir():Not a directory: /etc/blkid.tab open_dir():Not a directory: /etc/printcap open_dir():Not a directory: /etc/ld.so.cache open_dir():Not a directory: /etc/random-seed /sbin/hwclock atime in future AIDE found differences between database and filesystem!! Start timestamp: 2006-05-16 19:35:49 The thing about the directories I don't understand, and the atime ... does AIDE use UTC time and can't cope with NZ? Cheers, Andrej -- Please don't top post, and don't use HTML e-Mail :} Make your quotes concise. http://www.american.edu/econ/notes/htmlmail.htm _______________________________________________ Aide mailing list [email protected] https://mailman.cs.tut.fi/mailman/listinfo/aide
