Costas Zreikas wrote:
> Please can anyone help me on how to form a rule so to exclude files like;
>
> /lib/klibc/events/debug.00788.module.add.1250
Are those files? Or directories?
> In my aide.conf I have the lines;
>
> =/lib/klibc/events/$ R-m-c
> !/lib/klibc/events/debug.\d{5}.\w.add.\w{1,5}
> /lib R
Please see this bug with information that relates to your problem.
http://sourceforge.net/tracker/index.php?func=detail&aid=1162575&group_id=86976&atid=581579
It is a bug that no one has been able to figure out yet.
Bob
_______________________________________________
Aide mailing list
Aide@cs.tut.fi
https://mailman.cs.tut.fi/mailman/listinfo/aide
