I'm trying out aide since tripwire doesn't seem to be in the 5. releases anymore. I do not have Selinux on the server (no at installation), and I just yum installed the aide rpms, so I should have the latest. When I run my aide --init, I get all of these lines for all the files: lgetfilecon_raw failed for /usr/share/X11/app-defaults/XLogo:No data available I then copy the 'new' db file to the regular db file and run aide --check, and it seems I get the above lines all over again. It's as though the db files aren't being read. I noticed in the preceding release of aide that problems existed and was related to Selinux and the inability to read gz files. Am I doing something obviously wrong? Do I need to do an --update or is this just when I get reports that something has changed after the --init? Thanks for any help and replies. Steve Campbell
On Wed, Apr 9, 2008 at 11:39 AM, Steve Campbell <campbell at cnpapers.com> wrote:> I'm trying out aide since tripwire doesn't seem to be in the 5. releases > anymore. I do not have Selinux on the server (no at installation), and I > just yum installed the aide rpms, so I should have the latest. > > When I run my aide --init, I get all of these lines for all the files:There's an aide how-to for centos5 here -> http://www.bofh-hunter.com/2007/12/04/centos-5-and-aide/ -- During times of universal deceit, telling the truth becomes a revolutionary act. George Orwell