On Fri, 21 Sep 2007, Marc Haber wrote:
As a rule, if you once get a report that shows changes, you'll get all
log reported as changed the next day if you don't interfere manually.
Well, is the following procedure:
-----------------------------------------------------------
# /usr/sbin/aideinit
Overwrite existing /var/lib/aide/aide.db.new [Yn]? y
Running aide --init...
AIDE, version 0.13.1
### AIDE database at /var/lib/aide/aide.db.new initialized.
Overwrite /var/lib/aide/aide.db [yN]? y
----------------------------------------------------------
what you would call "interfere manually"?
I did so after changing the aide configuration and I did it again now.
I'm just waiting for monday whether aide will stay quiet (as I expect
it to be) and would come back if something was reported.
Kind regards
Andreas.
--
http://fam-tille.de
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
