1AIDE.CONF(5) AIDE AIDE.CONF(5)
2
6 aide.conf - The configuration file for Advanced Intrusion Detection
7 Environment
8
10 aide.conf is the configuration file for Advanced Intrusion Detection
11 Environment. aide.conf contains the runtime configuration aide uses to
12 initialize or check the AIDE database.
13
15 aide.conf is similar in to Tripwire(tm)'s configuration file. With lit‐
16 tle effort tw.conf can be converted to aide.conf.
17 aide.conf is case-sensitive. Leading and trailing white spaces are
19 ignored.
20 There are three types of lines in aide.conf. First there are the con‐
22 figuration lines which are used to set configuration parameters and
23 define/undefine variables. Second, there are (restricted) selection
24 lines that are used to indicate which files are added to the database.
25 Third, macro lines define or undefine variables within the config file.
26 Lines beginning with # are ignored as comments.
27
29 These lines have the format parameter=value. See URLS for a list of
30 valid urls.
31 database
33 The url from which database is read. There can only be one of
34 these lines. If there are multiple database lines then the first
35 is used. The default value is "/usr/etc/aide.db".
36 database_out
38 The url to which the new database is written to. There can only
39 be one of these lines. If there are multiple database_out lines
40 then the first is used. The default value is
41 "/usr/etc/aide.db.new".
42 database_new
44 The url from which the other database for --compare is read.
45 There is no default for this one.
46 database_attrs
48 The attributes of the (uncompressed) database files which are to
49 be added to the final report in verbose level 2 or higher. Only
50 checksum attributes are supported. To disable set database_attrs
51 to 'E'. By default all compiled in checksums are added to the
52 report.
53 database_add_metadata
55 Whether to add the AIDE version and the time of database genera‐
56 tion as comments to the database file or not. Valid values are
57 yes, true, no and false. The default is to add the AIDE version
58 and the time of database generation. This option may be set to
59 no by default in a future release.
60 verbose
62 The level of messages that is output. This value can be 0-255
63 inclusive. This parameter can only be given once. Value from the
64 first occurrence is used. If --verbose or -V is used then the
65 value from that is used. The default is 5. If verbosity is 20
66 then additional report output is written when doing --check,
67 --update or --compare.
68 syslog_format
70 Valid values are yes,true,no and false. This option enables new
71 syslog format which is suitable for logging. Every change is
72 logged as one simple line. This option changes verbose level to
73 0 and prints everything that was changed. It