|
The following steps describe how to run AIDE:
| No. | Task | Description | Notes |
|
|---|---|---|---|---|
| 1 | Initialize the AIDE Database. |
The value of database_out as defined in the
AIDE configuration file specifies the URL to which the new database
is written.
@@define DBDIR /var/lib/aide
database_out=file:@@{DBDIR}/aide.db.new.gz
Run the aide --init command to create a new AIDE database called aide.db.new.gz for all the directories defined in aide.conf under the /var/lib/aide directory. Example: # aide --config /etc/aide.conf --init AIDE, version 0.14 ### AIDE database at /var/lib/aide/aide.db.new.gz initialized. |
||
| 2 | Check the system against baseline database. |
The value of database as defined in the AIDE
configuration file specifies the URL from which the database is read
while running the aide --check command to check
for inconsistencies.
Run the cp /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz command to copy the baseline database to the file that is specified in the AIDE configuration file. When you run AIDE with --check option, it will check the system against the baseline database. |
||
| 3 | Update the baseline database. |
In some cases, the monitored files may have to be updated for legal
reasons. For example, Avaya Experience Portal system upgrade or patch install.
When you run AIDE with the --update option, it will run a scan and update the database non-interactively. AIDE saves the new database at the URL (database_out) specified in the configuration. |
||
| 4 | View the output report |
The value of report_url as defined in the AIDE
configuration file specifies the URL to which the AIDE output is written.
Though there can be multiple instances of this parameter, output is
written to all of them. However, the default is stdout.
The following shows the default report_url value as defined in the AIDE configuration file. @@define LOGDIR /var/log/aide
report_url=file:@@{LOGDIR}/aide.log
report_url=stdout
When you run the AIDE tool, the output report is shown on the screen as well as the debug log located at /var/log/aide/aide.log. |