I have recently submitted a new aide ebuild which will be default include a working aide.conf as opposed to the previous ebuilds that had a non usable config. In addition I have also added a script called "aideinit" which will take care of creating the aide databases for you and updating them. I have also included a cron entry that will now email you information relating to database violations etc. The information at http://www.gentoo.org/doc/en/security/security-handbook.xml?part=1&chap=13 could be updated. In particular the cron job part is obsolete with the new cron entry and the new script could be mentioned so that people are aware of it as a means of administering AIDE. Finally you could mention that we now have a usable config as default.
A patch against http://www.gentoo.org/doc/en/security/shb-intrusion.xml?passthru=1 would be much appreciated.
Created attachment 73438 [details] changes for aide and snort Here is the request diff. Please double check that its all still nicely compliant however.
Committed. Thanks a lot for the patch.
