mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-07-16 15:57:21 +00:00
Code Issues Projects Releases Wiki Activity

aide.conf: adjust to allow for build time db creation

Browse Source 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
Armin Kuster
2022-06-17 22:13:44 -07:00
parent 1f11389089
commit 6dedb1de70
1 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
recipes-ids/aide/aide/aide.conf
+4 -7
View File
@@ -51,7 +51,7 @@ report_url=stdout
#crc32: crc32 checksum (MHASH only) #crc32: crc32 checksum (MHASH only)
#whirlpool: whirlpool checksum (MHASH only) #whirlpool: whirlpool checksum (MHASH only)
FIPSR = p+i+n+u+g+s+m+c+acl+selinux+xattrs+sha256 FIPSR = p+u+g+s+acl+xattrs+sha256
#R: p+i+n+u+g+s+m+c+acl+selinux+xattrs+md5 #R: p+i+n+u+g+s+m+c+acl+selinux+xattrs+md5
#L: p+i+n+u+g+acl+selinux+xattrs #L: p+i+n+u+g+acl+selinux+xattrs
@@ -70,10 +70,10 @@ EVERYTHING = R+ALLXTRAHASHES
NORMAL = FIPSR+sha512 NORMAL = FIPSR+sha512
# For directories, don't bother doing hashes # For directories, don't bother doing hashes
DIR = p+i+n+u+g+acl+selinux+xattrs DIR = p+u+g+acl+xattrs
# Access control only # Access control only
PERMS = p+i+u+g+acl+selinux PERMS = p+u+g+acl
# Logfile are special, in that they often change # Logfile are special, in that they often change
LOG = > LOG = >
@@ -83,12 +83,9 @@ LSPP = FIPSR+sha512
# Some files get updated automatically, so the inode/ctime/mtime change # Some files get updated automatically, so the inode/ctime/mtime change
# but we want to know when the data inside them changes # but we want to know when the data inside them changes
DATAONLY = p+n+u+g+s+acl+selinux+xattrs+sha256 DATAONLY = p+u+g+s+acl+xattrs+sha256
# Next decide what directories/files you want in the database. # Next decide what directories/files you want in the database.
# Check only permissions, inode, user and group for /etc, but # Check only permissions, inode, user and group for /etc, but
# cover some important files closely. # cover some important files closely.
/bin NORMAL
/sbin NORMAL
/lib NORMAL