On Fri, Sep 21, 2007 at 02:58:30PM +0200, Andreas Tille wrote: > On Fri, 21 Sep 2007, Marc Haber wrote: >> As a rule, if you once get a report that shows changes, you'll get all >> log reported as changed the next day if you don't interfere manually. > > Well, is the following procedure: > > ----------------------------------------------------------- > # /usr/sbin/aideinit > Overwrite existing /var/lib/aide/aide.db.new [Yn]? y > Running aide --init... > > AIDE, version 0.13.1 > > ### AIDE database at /var/lib/aide/aide.db.new initialized. > > Overwrite /var/lib/aide/aide.db [yN]? y > ---------------------------------------------------------- > > what you would call "interfere manually"?
Depending on your level of paranoia, it might be sufficient to manually copy over /var/lib/aide/aide.db.new to /var/lib/aide/aide.db. Greetings Marc -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834 Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
