[Pkg-aide-maintainers] Bug#442214: aide: Aide issues false alarms

[Bill Wohler]

Package: aide
Severity: normal
Version: 0.13.1-8

Hi Marc, I think I'm seeing the same thing here. It appears that the ARF
rule isn't working as advertised.

For example, the following line appeared in the report:

  removed: /var/log/aide/aide.log.6.gz

However, in /etc/aide/aide.conf.local.d/31_aide_aide [1], I see: 

  /var/log/aide/aide\.log\.6\.gz$ RotatedLogs+ARF

which should be suppressing this message. Right?

If I run:

  sudo mv /var/lib/aide/aide.db.new /var/lib/aide/aide.db
  sudo /etc/cron.daily/aide

I still get the same report.

1. Yes, I have UPAC_CONFD="$UPAC_CONFDIR/aide.conf.local.d" in
/etc/default/aide.

-- 
Bill Wohler <wohler at newt.com>  http://www.newt.com/wohler/  GnuPG ID:610BD9AD