Questions tagged [aide]
The aide tag has no usage guidance.
12
questions
1
vote
1answer
44 views
SELinux: AIDE Trying to Access SSSD Socket
I'm getting SELinux denials indicating that /usr/sbin/aide is trying to access a socket used by SSSD: the socket path is /var/lib/sss/pipes/nss. Here is the relevant text from sealert:
Additional ...
0
votes
1answer
16 views
Salt-Stack init process after package is installed
Installing AIDE needs to follow by a init proces.
aide:
pkg:
- installed
Now the following commands need to run only once:
/usr/sbin/aide --config=/etc/aide.conf --init
mv -f /var/lib/aide/aide.db....
-1
votes
1answer
66 views
Installing AIDE in Alpine
I'm trying to make my Alpine instance more secure by installing AIDE but it doesn't seem to be in the repos:
#apk add aide
fetch http://dl-cdn.alpinelinux.org/alpine/v3.8/main/x86_64/APKINDEX.tar.gz
...
0
votes
1answer
23 views
Cannot run an “initialise” function in Puppet after installing package
OK I have been working on puppet for 12 months, I am deploying a manifest to install the "aide" package, but I cannot see any option to trigger the 'initialise' of aide after install of the package. ...
0
votes
3answers
2k views
cron job executing script not writing to file
I have a server running AIDE, and a cron job that runs executes a bash script and sends an email alert out. It is still a WIP, but I can't get the script to run properly. When the script is executed, ...
0
votes
1answer
685 views
AIDE Self Protection - Best Practices
I set up a pretty simple server and tried to make it secure using some tools and some guidelines which I think are not too bad.
I came up using AIDE, which is fast as an implementation of an ...
3
votes
1answer
1k views
Auditing in linux
I am trying to setup a robust auditing mechanism on my centos 6.x boxes. I tried and tested various auditing tools like
auditd
aide
psacct
But none is full filling my requirement. My requirement ...
2
votes
1answer
2k views
How do I interpret aide.log change summary
In the Changed files section of /var/log/aide/aide.log there are prefixes on each line starting with f or d. These signify what aspects of the file has changed, but I can't seem to track down what ...
0
votes
1answer
1k views
Integrity checking vs. audit
In RHEL5 Security Guide using of AIDE for checking software integrity is recomended. And also built-in RPM integrity checking functionality. But frequent checking can be resource demanding and rare ...
2
votes
1answer
574 views
Analyse of logwatch and aide file
We have both logwatch and aide file. We would like to know how to know if there any intrusion have had taken place as this server was not active for some time. We quite a number of this entries in the ...
3
votes
1answer
7k views
AIDE - How to exclude whole folders?
I've recently installed AIDE on a server of mine after having a run in with hackers a week or so ago.
There doesn't appear to be much documentation around for AIDE, especially on their website. I've ...
3
votes
2answers
5k views
aide --init show lots of errors
I have a brand new centos 6.2 server. The first thing I did is yum -y install aide and then next I did aide --init. Below is a whole lot of errors I got.What does it means must I reinstall it? Or ...
