#
# Copyright (c) 2000 SuSE, Germany.
#
# Author: Matthias Eckermann, SuSE Linux Solutions AG
#
# /etc/aide.conf
#

database=file:/var/lib/aide/aide.db
database_out=file:/var/lib/aide/aide.db.new
verbose=20
#verbose=5
report_url=stdout
All=R+a+sha1+rmd160+tiger
Norm=s+n+b+md5+sha1+rmd160+tiger

# Whether to gzip the output to database
# gzip_dbout=no

#report_url=stdout
#other possibilities
#report_url=stderr
#NOT IMPLEMENTED report_url=mailto:root@foo.com
#report_url=file:/tmp/some_file.txt
#NOT IMPLEMENTED report_url=syslog:LOG_AUTH
report_url=stdout

#p:     permissions
#i:	inode
#n:	number of links
#u:	user
#g:	group
#s:	size
#b:	block count
#m:	mtime
#a:	atime
#c:	ctime
#S:	check for growing size
#md5:	md5 checksum
#sha1:	sha1 checksum
#rmd160:     rmd160 checksum
#tiger:     tiger checksum
#R:	p+i+n+u+g+s+m+c+md5
#L:	p+i+n+u+g
#E:	Empty group
#>:	Growing logfile p+u+g+i+n+S
#The following are available if you have mhash support enabled.
#haval:		haval checksum
#gost:		gost checksum
#crc32:		crc32 checksum


# Rule definition
#All=R+a+b
All=R+b

# ignore_list is a special rule definition
# the attributes listed in it are not displayed in the
# final report

# Attributes that can be used to verify that aide in intact
# by people that have downloaded it from the web.
# Let's be paranoid
#Norm=s+n+b+md5+sha1+rmd160+tiger
Norm=s+n+b+md5

#
# do not look at these
#

!/dev
!/tmp
!/proc
!/usr/src
!/.*~
!/.*RCS
!/.*CVS
!/.*aide\.db.*
!/.*\.cvsignore.*
!/etc/X11
!/etc/susehelp.d
!/etc/pcmcia
!/var/log/messages
!/var/log/mail
!/var/log/lastlog
!/var/log/wtmp
!/var/log/sendmail.st
!/var/spool/mqueue
#!/var/spool/mail

# 
# and work on all the others
#

#/ R
/ All