Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 138998 - Security Handbook: wrong sample AIDE configuration file
Summary: Security Handbook: wrong sample AIDE configuration file
Status: RESOLVED FIXED
Alias: None
Product: [OLD] Docs on www.gentoo.org
Classification: Unclassified
Component: Other documents (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: nm (RETIRED)
URL: http://www.gentoo.org/doc/en/security...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-07-03 07:04 UTC by Paweł Hajdan, Jr. (RETIRED)
Modified: 2006-11-01 00:16 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2006-07-03 07:04:03 UTC 
Sample configuration file (code listing 2) should include this line:

!@@{TOPDIR}sys

Otherwise aide prints a lot of error messages (cannot mmap etc.) about directories inside /sys.
Comment 1 Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2006-07-03 07:22:28 UTC 
consider also these two:

!@@{TOPDIR}media
!@@{TOPDIR}mnt
Comment 2 Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2006-08-20 07:09:01 UTC 
consider also:

!@@{TOPDIR}lib/splash/cache
!@@{TOPDIR}lib64/splash/cache
Comment 3 Eugeniy Khabarov aka ShadOS 2006-08-28 23:30:31 UTC 
"aideinit -i"  is not valid command
please, replace it with "aide -i"
Comment 4 nm (RETIRED) gentoo-dev 2006-10-31 23:59:06 UTC 
(In reply to comment #3)
> "aideinit -i"  is not valid command
> please, replace it with "aide -i"
> 

Fixed in CVS.
Comment 5 nm (RETIRED) gentoo-dev 2006-11-01 00:16:09 UTC 
Updated shb-intrusion.xml with the suggested directories, except for /lib/splash/cache and /lib64/splash/cache, since those are bootsplash-related, and the stuff in 'em doesn't change often enough to specifically be excluded.

Thanks for reporting, and much thanks to Daniel Black (dragonheart) on IRC for reviewing. Fixed in CVS.