Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-1382

aide excludes everything under specified directory even when a pattern matches

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • aide-0.19.2-2.el10
    • Yes
    • Important
    • rhel-security-special-projects
    • ssg_security
    • 7
    • 1
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • Release Note Not Required
    • None
    • 0

      Description of problem:

      A customer wants to exclude a directory in general but include some items under a subdirectory.

      The aide.conf(5) manpage shows such example:
      -------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------
      Add all but directory entries to the database:

      !/run d
      /run R
      -------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------

      Trying the example on my system (and removing everything else for clarity), as soon as "!/run d" is specified, nothing gets collected under "/run":
      -------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------

      1. aide -i
        [...]
        Number of entries: 0
        [...]
                    • 8< ---------------- 8< ---------------- 8< ---------------- 8< --------

      If I remove "!/run d", then files are collected:
      -------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------

      1. aide -i
        [...]
        Number of entries: 585
        [...]
                    • 8< ---------------- 8< ---------------- 8< ---------------- 8< --------

      It hence looks like exclusion gets precedence and there is no way to achieve what we want here.

      Version-Release number of selected component (if applicable):

      aide-0.16-14.el8_5.1.x86_64

      How reproducible:

      Always

      Steps to Reproduce:
      1. Remove all rules starting from "# Next decide what directories/files you want in the database." comment
      2. Add rules on /run

      !/run d
      /run R

      3. Initialize the database

      Actual results:

      No file entry saved in database

      Expected results:

      A certain number of file entries saved in database

              rh-ee-alakatos Attila Lakatos
              rhn-support-rmetrich Renaud Métrich
              Attila Lakatos
              SSG Security QE SSG Security QE
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: