summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorArmin Kuster <akuster808@gmail.com>2022-06-17 22:13:44 -0700
committerArmin Kuster <akuster808@gmail.com>2022-06-23 18:47:59 -0700
commit6dedb1de7017f8c6afa61dacfdfc409dfc6cecad (patch)
tree2b8eb648e7fab85440dd2a82401f040006f97221
parent1f113890893e6655779518d508c394911ae0d542 (diff)
downloadmeta-security-6dedb1de7017f8c6afa61dacfdfc409dfc6cecad.tar.gz
aide.conf: adjust to allow for build time db creation
Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--recipes-ids/aide/aide/aide.conf11
1 files changed, 4 insertions, 7 deletions
diff --git a/recipes-ids/aide/aide/aide.conf b/recipes-ids/aide/aide/aide.conf
index 2c99e07..c4b917e 100644
--- a/recipes-ids/aide/aide/aide.conf
+++ b/recipes-ids/aide/aide/aide.conf
@@ -51,7 +51,7 @@ report_url=stdout
51#crc32: crc32 checksum (MHASH only) 51#crc32: crc32 checksum (MHASH only)
52#whirlpool: whirlpool checksum (MHASH only) 52#whirlpool: whirlpool checksum (MHASH only)
53 53
54FIPSR = p+i+n+u+g+s+m+c+acl+selinux+xattrs+sha256 54FIPSR = p+u+g+s+acl+xattrs+sha256
55 55
56#R: p+i+n+u+g+s+m+c+acl+selinux+xattrs+md5 56#R: p+i+n+u+g+s+m+c+acl+selinux+xattrs+md5
57#L: p+i+n+u+g+acl+selinux+xattrs 57#L: p+i+n+u+g+acl+selinux+xattrs
@@ -70,10 +70,10 @@ EVERYTHING = R+ALLXTRAHASHES
70NORMAL = FIPSR+sha512 70NORMAL = FIPSR+sha512
71 71
72# For directories, don't bother doing hashes 72# For directories, don't bother doing hashes
73DIR = p+i+n+u+g+acl+selinux+xattrs 73DIR = p+u+g+acl+xattrs
74 74
75# Access control only 75# Access control only
76PERMS = p+i+u+g+acl+selinux 76PERMS = p+u+g+acl
77 77
78# Logfile are special, in that they often change 78# Logfile are special, in that they often change
79LOG = > 79LOG = >
@@ -83,12 +83,9 @@ LSPP = FIPSR+sha512
83 83
84# Some files get updated automatically, so the inode/ctime/mtime change 84# Some files get updated automatically, so the inode/ctime/mtime change
85# but we want to know when the data inside them changes 85# but we want to know when the data inside them changes
86DATAONLY = p+n+u+g+s+acl+selinux+xattrs+sha256 86DATAONLY = p+u+g+s+acl+xattrs+sha256
87 87
88# Next decide what directories/files you want in the database. 88# Next decide what directories/files you want in the database.
89 89
90# Check only permissions, inode, user and group for /etc, but 90# Check only permissions, inode, user and group for /etc, but
91# cover some important files closely. 91# cover some important files closely.
92/bin NORMAL
93/sbin NORMAL
94/lib NORMAL