diff options
author | Armin Kuster <akuster808@gmail.com> | 2022-06-17 22:13:44 -0700 |
---|---|---|
committer | Armin Kuster <akuster808@gmail.com> | 2022-06-23 18:47:59 -0700 |
commit | 6dedb1de7017f8c6afa61dacfdfc409dfc6cecad (patch) | |
tree | 2b8eb648e7fab85440dd2a82401f040006f97221 | |
parent | 1f113890893e6655779518d508c394911ae0d542 (diff) | |
download | meta-security-6dedb1de7017f8c6afa61dacfdfc409dfc6cecad.tar.gz |
aide.conf: adjust to allow for build time db creation
Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r-- | recipes-ids/aide/aide/aide.conf | 11 |
1 files changed, 4 insertions, 7 deletions
diff --git a/recipes-ids/aide/aide/aide.conf b/recipes-ids/aide/aide/aide.conf index 2c99e07..c4b917e 100644 --- a/recipes-ids/aide/aide/aide.conf +++ b/recipes-ids/aide/aide/aide.conf | |||
@@ -51,7 +51,7 @@ report_url=stdout | |||
51 | #crc32: crc32 checksum (MHASH only) | 51 | #crc32: crc32 checksum (MHASH only) |
52 | #whirlpool: whirlpool checksum (MHASH only) | 52 | #whirlpool: whirlpool checksum (MHASH only) |
53 | 53 | ||
54 | FIPSR = p+i+n+u+g+s+m+c+acl+selinux+xattrs+sha256 | 54 | FIPSR = p+u+g+s+acl+xattrs+sha256 |
55 | 55 | ||
56 | #R: p+i+n+u+g+s+m+c+acl+selinux+xattrs+md5 | 56 | #R: p+i+n+u+g+s+m+c+acl+selinux+xattrs+md5 |
57 | #L: p+i+n+u+g+acl+selinux+xattrs | 57 | #L: p+i+n+u+g+acl+selinux+xattrs |
@@ -70,10 +70,10 @@ EVERYTHING = R+ALLXTRAHASHES | |||
70 | NORMAL = FIPSR+sha512 | 70 | NORMAL = FIPSR+sha512 |
71 | 71 | ||
72 | # For directories, don't bother doing hashes | 72 | # For directories, don't bother doing hashes |
73 | DIR = p+i+n+u+g+acl+selinux+xattrs | 73 | DIR = p+u+g+acl+xattrs |
74 | 74 | ||
75 | # Access control only | 75 | # Access control only |
76 | PERMS = p+i+u+g+acl+selinux | 76 | PERMS = p+u+g+acl |
77 | 77 | ||
78 | # Logfile are special, in that they often change | 78 | # Logfile are special, in that they often change |
79 | LOG = > | 79 | LOG = > |
@@ -83,12 +83,9 @@ LSPP = FIPSR+sha512 | |||
83 | 83 | ||
84 | # Some files get updated automatically, so the inode/ctime/mtime change | 84 | # Some files get updated automatically, so the inode/ctime/mtime change |
85 | # but we want to know when the data inside them changes | 85 | # but we want to know when the data inside them changes |
86 | DATAONLY = p+n+u+g+s+acl+selinux+xattrs+sha256 | 86 | DATAONLY = p+u+g+s+acl+xattrs+sha256 |
87 | 87 | ||
88 | # Next decide what directories/files you want in the database. | 88 | # Next decide what directories/files you want in the database. |
89 | 89 | ||
90 | # Check only permissions, inode, user and group for /etc, but | 90 | # Check only permissions, inode, user and group for /etc, but |
91 | # cover some important files closely. | 91 | # cover some important files closely. |
92 | /bin NORMAL | ||
93 | /sbin NORMAL | ||
94 | /lib NORMAL | ||