On Wed, Apr 23, 2025 at 12:38:45PM +0000, sai.sathuj...@toshiba-tsip.com wrote:
> $ ls -l /lib
> lrwxrwxrwx 1 root root 7 Aug 4 2023 /lib -> usr/lib
>
> So, based on our discussion can we conclude aide will not be able to
> accept files present in symlinks as it's database entries, right?
To monitor the files located in a target directory, they must also match
the rules. For instance the rule `/(usr/)?lib R` would match both the
symlink /lib and the link target /usr/lib.
You can use --dry-init to show which files would be added to the
database, e.g.:
aide --before "/(usr/)?lib R" --dry-init
Best regards
Hannes
