-
Bug
-
Resolution: Unresolved
-
Undefined
-
rhel-10.1
-
None
-
Moderate
-
rhel-security-special-projects
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
With recent aide, there is support for "included" files.
But our RHEL /etc/aide.conf doesn't has the directive by default, while, IMHO, it should have it.
Note that the directive such as the one below should be added before standard rules, otherwise the standard rules will take precedence:
[...] # Some files get updated automatically, so the inode/ctime/mtime change # but we want to know when the data inside them changes DATAONLY = p+n+u+g+s+acl+selinux+xattrs+sha256 # Read /etc/aide.d/*.conf files <<<< NEW @@include /etc/aide.d .*\.conf$ <<<< NEW # Next decide what directories/files you want in the database. [...]
Also /etc/aide.d directory should be added to the package for customer convenience.
What is the impact of this issue to you?
Ease customization through avoiding to modify the standard configuration file.
Please provide the package NVR for which the bug is seen:
aide-0.18.6-8.el10_1.2
How reproducible is this bug?
N/A