Bookmark this page

Summary

  • AIDE detects changes that are made to a machine's file systems by using a database of baseline information.

  • An AIDE check can be run manually, or it can be scheduled with a tool such as crontab.

  • You can configure AIDE checks against specific files and directories by using group definitions, selection lines, and macros in the /etc/aide.conf file.

  • You must rebuild the AIDE database file to accept authorized changes to files and to apply new settings from the configuration file.

  • You can use Audit with AIDE to help you determine what process or user caused a change that AIDE reported.

Revision: rh415-9.2-a821299