{ "created": "2015-12-20T19:56:35Z", "hierarchy": [ { "name": "ROOT", "type": "folder", "uri": "/ROOT" }, { "name": "AIDE Setup Notes", "type": "article", "uri": "AIDE_Setup_Notes" } ], "html": "\n\n \n \n \n \n \n \n \n \n \n \n \n AIDE Setup Notes – Nikhil's Personal Wiki\n \n \n \n \n \n
\n
\n \n
\n
\n \n \n\n

AIDE Setup Notes\n \n

\n
\n

tags:

\n\n
\n

Installed AIDE v0.13.1-6.el5_8.2
\non CentOS 5.8 x86_64

\n

Notes

\n

Installation

\n
yum -y install aide  \ncp /etc/aide.conf{,.original}\n

Configuration

\n

The aide.conf file has selinux entries which you might want to
\nredefine
\nto prevent “lgetfilecon_raw failed” errors. Here are my definitions:

\n
ALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger  \nEVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES  \nNORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256  \nDIR           = p+i+n+u+g+acl+xattrs  \nPERMS         = p+i+u+g+acl  \nLOG           = p+u+g+i+n+S+acl+xattrs  \nLSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256  \nDATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger\n
\n

Read the file, determine what you need, and add/adjust entries
\naccordingly.

\n

Initialization

\n
aide --init\n

This creates /var/lib/aide/aide.db.new.gz. Back up this file to a
\nsafe and secure place off this server! Now rename the file:

\n
mv /var/lib/aide/{aide.db.new.gz,aide.db.gz}\n

Checking

\n
# On the system  \naide --check  \n  \n# Comparing outside the system  \naide --compare old.db.gz new.db.gz\n
\n\n
\n \n
\n \n \n \n \n \n\n", "id": "b216e8ff-0fe5-5ce7-bff9-ef299b7ef247", "modified": "2026-01-13T18:47:28Z", "revisions": [ { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2026-01-13T18:47:28Z", "id": "2436477560f26e23d00a24add1cbfeafdca4af78", "shortId": "24364775", "subject": "No compression\n", "content": "---\ntags:\n - centos\n - redhat\n - linux\n - guide\n---\n\nInstalled [AIDE](http://aide.sourceforge.net/) `v0.13.1-6.el5_8.2` \non CentOS 5.8 x86\\_64\n\nNotes\n-----\n\n### Installation\n\n```bash\nyum -y install aide \ncp /etc/aide.conf{,.original}\n```\n\n### Configuration\n\nThe `aide.conf` file has selinux entries which you [might want to\nredefine](http://backdrift.org/how-to-fix-aide-lgetfilecon_raw-failed-for-no-data-available-errors?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Backdrift+%28Backdrift%29)\nto prevent \"`lgetfilecon_raw failed`\" errors. Here are my definitions:\n\n```\nALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger \nEVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES \nNORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256 \nDIR           = p+i+n+u+g+acl+xattrs \nPERMS         = p+i+u+g+acl \nLOG           = p+u+g+i+n+S+acl+xattrs \nLSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256 \nDATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger\n```\n\nRead the file, determine what you need, and add/adjust entries\naccordingly.\n\n### Initialization\n\n```bash\naide --init\n```\n\nThis creates `/var/lib/aide/aide.db.new.gz`. **Back up this file to a\nsafe and secure place off this server!** Now rename the file:\n\n```bash\nmv /var/lib/aide/{aide.db.new.gz,aide.db.gz}\n```\n\n### Checking\n\n```bash\n# On the system \naide --check \n \n# Comparing outside the system \naide --compare old.db.gz new.db.gz\n```\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2019-12-26T21:56:34Z", "id": "3dbcc809f3e34ba24cbfe9c62cde69409e6bb2bb", "shortId": "3dbcc809", "subject": "Add tags via frontmatter\n", "content": "---\ntags:\n - centos\n - redhat\n - linux\n - guide\n---\n\nInstalled [AIDE](http://aide.sourceforge.net/) `v0.13.1-6.el5_8.2` \non CentOS 5.8 x86\\_64\n\nNotes\n-----\n\n### Installation\n\n```bash\nyum -y install aide \ncp /etc/aide.conf{,.original}\n```\n\n### Configuration\n\nThe `aide.conf` file has selinux entries which you [might want to\nredefine](http://backdrift.org/how-to-fix-aide-lgetfilecon_raw-failed-for-no-data-available-errors?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Backdrift+%28Backdrift%29)\nto prevent \"`lgetfilecon_raw failed`\" errors. Here are my definitions:\n\n```\nALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger \nEVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES \nNORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256 \nDIR           = p+i+n+u+g+acl+xattrs \nPERMS         = p+i+u+g+acl \nLOG           = p+u+g+i+n+S+acl+xattrs \nLSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256 \nDATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger\n```\n\nRead the file, determine what you need, and add/adjust entries\naccordingly.\n\n### Initialization\n\n```bash\naide --init\n```\n\nThis creates `/var/lib/aide/aide.db.new.gz`. **Back up this file to a\nsafe and secure place off this server!** Now rename the file:\n\n```bash\nmv /var/lib/aide/{aide.db.new.gz,aide.db.gz}\n```\n\n### Checking\n\n```bash\n# On the system \naide --check \n \n# Comparing outside the system \naide --compare old.db.gz new.db.gz\n```\n" }, { "authorEmail": "anand.nikhil@gmail.com", "authorName": "Nikhil Anand", "date": "2015-12-27T09:56:56Z", "id": "aa48b4b13324f7bb7c41d815ce772b7085bb2747", "shortId": "aa48b4b1", "subject": "Add code block for command\n", "content": "Installed [AIDE](http://aide.sourceforge.net/) `v0.13.1-6.el5_8.2` \non CentOS 5.8 x86\\_64\n\nNotes\n-----\n\n### Installation\n\n```bash\nyum -y install aide \ncp /etc/aide.conf{,.original}\n```\n\n### Configuration\n\nThe `aide.conf` file has selinux entries which you [might want to\nredefine](http://backdrift.org/how-to-fix-aide-lgetfilecon_raw-failed-for-no-data-available-errors?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Backdrift+%28Backdrift%29)\nto prevent \"`lgetfilecon_raw failed`\" errors. Here are my definitions:\n\n```\nALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger \nEVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES \nNORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256 \nDIR           = p+i+n+u+g+acl+xattrs \nPERMS         = p+i+u+g+acl \nLOG           = p+u+g+i+n+S+acl+xattrs \nLSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256 \nDATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger\n```\n\nRead the file, determine what you need, and add/adjust entries\naccordingly.\n\n### Initialization\n\n```bash\naide --init\n```\n\nThis creates `/var/lib/aide/aide.db.new.gz`. **Back up this file to a\nsafe and secure place off this server!** Now rename the file:\n\n```bash\nmv /var/lib/aide/{aide.db.new.gz,aide.db.gz}\n```\n\n### Checking\n\n```bash\n# On the system \naide --check \n \n# Comparing outside the system \naide --compare old.db.gz new.db.gz\n```\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2015-12-27T07:27:56Z", "id": "1aa29105a45aa67523ffb61e73bcc415f935a47e", "shortId": "1aa29105", "subject": "Fix Markdown conversion\n\nSaw half a season of The Office\n", "content": "Installed [AIDE](http://aide.sourceforge.net/) `v0.13.1-6.el5_8.2` \non CentOS 5.8 x86\\_64\n\nNotes\n-----\n\n### Installation\n\n```bash\nyum -y install aide \ncp /etc/aide.conf{,.original}\n```\n\n### Configuration\n\nThe `aide.conf` file has selinux entries which you [might want to\nredefine](http://backdrift.org/how-to-fix-aide-lgetfilecon_raw-failed-for-no-data-available-errors?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Backdrift+%28Backdrift%29)\nto prevent \"`lgetfilecon_raw failed`\" errors. Here are my definitions:\n\n```\nALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger \nEVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES \nNORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256 \nDIR           = p+i+n+u+g+acl+xattrs \nPERMS         = p+i+u+g+acl \nLOG           = p+u+g+i+n+S+acl+xattrs \nLSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256 \nDATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger\n```\n\nRead the file, determine what you need, and add/adjust entries\naccordingly.\n\n### Initialization\n\n```bash\naide --init\n```\n\nThis creates `/var/lib/aide/aide.db.new.gz`. **Back up this file to a\nsafe and secure place off this server!** Now rename the file:\n\n```bash\nmv /var/lib/aide/{aide.db.new.gz,aide.db.gz}\n```\n\n### Checking\n\n```bash\n# On the system \naide --check \n \n# Comparing outside the system \naide --compare old.db.gz new.db.gz\n```\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2015-12-21T09:21:46Z", "id": "255f4cd6587aaa8efd873d9678655c30ceda5677", "shortId": "255f4cd6", "subject": "Fix Markdown formatting\n", "content": "Installed [AIDE](http://aide.sourceforge.net/) `v0.13.1-6.el5_8.2` \non CentOS 5.8 x86\\_64\n\nNotes\n-----\n\n### Installation\n\n```bash\nyum -y install aide \ncp /etc/aide.conf{,.original}\n```\n\n### Configuration\n\nThe `aide.conf` file has selinux entries which you [might want to\nredefine](http://backdrift.org/how-to-fix-aide-lgetfilecon_raw-failed-for-no-data-available-errors?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Backdrift+%28Backdrift%29)\nto prevent \"`lgetfilecon_raw failed`\" errors. Here are my definitions:\n\n ALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger \n EVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES \n NORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256 \n DIR           = p+i+n+u+g+acl+xattrs \n PERMS         = p+i+u+g+acl \n LOG           = p+u+g+i+n+S+acl+xattrs \n LSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256 \n DATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger\n\nRead the file, determine what you need, and add/adjust entries\naccordingly.\n\n### Initialization\n\n aide --init\n\nThis creates `/var/lib/aide/aide.db.new.gz`. **Back up this file to a\nsafe and secure place off this server!** Now rename the file:\n\n```bash\nmv /var/lib/aide/{aide.db.new.gz,aide.db.gz}\n```\n\n### Checking\n\n```bash\n# On the system \naide --check \n \n# Comparing outside the system \naide --compare old.db.gz new.db.gz\n```\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2015-12-21T02:30:47Z", "id": "d658e80d1ecb97b196531c7b15a0f9af709c05de", "shortId": "d658e80d", "subject": "Incremental\n", "content": "Pre-Flight\n----------\n\n- AIDE `v0.13.1-6.el5_8.2` on CentOS 5.8 x86\\_64\n\nNotes\n-----\n\n### Installation\n\n` yum -y install aide` \n` cp /etc/aide.conf{,.original}`\n\n### Configuration\n\nThe `aide.conf` file has selinux entries which you [might want to\nredefine](http://backdrift.org/how-to-fix-aide-lgetfilecon_raw-failed-for-no-data-available-errors?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Backdrift+%28Backdrift%29)\nto prevent \"`lgetfilecon_raw failed`\" errors. Here are my definitions:\n\n` ALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger` \n` EVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES` \n` NORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256` \n` DIR           = p+i+n+u+g+acl+xattrs` \n` PERMS         = p+i+u+g+acl` \n` LOG           = p+u+g+i+n+S+acl+xattrs` \n` LSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256` \n` DATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger`\n\nRead the file, determine what you need, and add/adjust entries\naccordingly.\n\n### Initialization\n\n` aide --init`\n\nThis creates `/var/lib/aide/aide.db.new.gz`. **Back up this file to a\nsafe and secure place off this server!** Now rename the file:\n\n` mv /var/lib/aide/{aide.db.new.gz,aide.db.gz}`\n\n### Checking\n\n` # On the system` \n` aide --check` \n` ` \n` # Comparing outside the system` \n` aide --compare old.db.gz new.db.gz`\n\n\n\n\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2015-12-20T19:56:35Z", "id": "e4f0c99d48a0388422aca5b779bfc8a6cd75333c", "shortId": "e4f0c99d", "subject": "AIDE Setup Notes : v2\n", "content": "Pre-Flight\n----------\n\n- AIDE `v0.13.1-6.el5_8.2` on CentOS 5.8 x86\\_64\n\nNotes\n-----\n\n### Installation\n\n` yum -y install aide` \n` cp /etc/aide.conf{,.original}`\n\n### Configuration\n\nThe `aide.conf` file has selinux entries which you [might want to\nredefine](http://backdrift.org/how-to-fix-aide-lgetfilecon_raw-failed-for-no-data-available-errors?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Backdrift+%28Backdrift%29)\nto prevent \"`lgetfilecon_raw failed`\" errors. Here are my definitions:\n\n` ALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger` \n` EVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES` \n` NORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256` \n` DIR           = p+i+n+u+g+acl+xattrs` \n` PERMS         = p+i+u+g+acl` \n` LOG           = p+u+g+i+n+S+acl+xattrs` \n` LSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256` \n` DATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger`\n\nRead the file, determine what you need, and add/adjust entries\naccordingly.\n\n### Initialization\n\n` aide --init`\n\nThis creates `/var/lib/aide/aide.db.new.gz`. **Back up this file to a\nsafe and secure place off this server!** Now rename the file:\n\n` mv /var/lib/aide/{aide.db.new.gz,aide.db.gz}`\n\n### Checking\n\n` # On the system` \n` aide --check` \n` ` \n` # Comparing outside the system` \n` aide --compare old.db.gz new.db.gz`\n\n[Category:Installation Logs](Category:Installation_Logs \"wikilink\")\n[Category:Nikhil's Notes](Category:Nikhil's_Notes \"wikilink\")\n[Category:From a past sysadmin\nlife](Category:From_a_past_sysadmin_life \"wikilink\")\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2015-12-20T19:56:35Z", "id": "302894fdca83505ae12f1589d1ef95f029e85683", "shortId": "302894fd", "subject": "AIDE Setup Notes : First Draft\n", "content": "Pre-Flight\n----------\n\n- AIDE `v0.13.1-6.el5_8.2` on CentOS 5.8 x86\\_64\n\nNotes\n-----\n\n### Installation\n\n` yum -y install aide` \n` cp /etc/aide.conf{,.original}`\n\n### Configuration\n\nThe `aide.conf` file has selinux entries which you [might want to\nredefine](http://backdrift.org/how-to-fix-aide-lgetfilecon_raw-failed-for-no-data-available-errors?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Backdrift+%28Backdrift%29)\nto prevent \"`lgetfilecon_raw failed`\" errors. Here are my definitions:\n\n` ALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger` \n` EVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES` \n` NORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256` \n` DIR           = p+i+n+u+g+acl+xattrs` \n` PERMS         = p+i+u+g+acl` \n` LOG           = p+u+g+i+n+S+acl+xattrs` \n` LSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256` \n` DATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger`\n\nRead the file, determine what you need, and add/adjust entries\naccordingly.\n\n### Initialization\n\n` aide --init`\n\nThis creates `/var/lib/aide/aide.db.new.gz`. **Back up this file to a\nsafe and secure place off this server!** Now rename the file:\n\n` mv /var/lib/aide/{aide.db.new.gz,aide.db.gz}`\n\n### Checking\n\n` # On the system` \n` aide --check` \n` ` \n` # Comparing outside the system` \n` aide --compare old.db.gz new.db.gz`\n\n[Category:Installation Logs](Category:Installation_Logs \"wikilink\")\n[Category:Nikhil's Notes](Category:Nikhil's_Notes \"wikilink\")\n" } ], "sizeInBytes": 1526, "source": "---\ntags:\n - centos\n - redhat\n - linux\n - guide\n---\n\nInstalled [AIDE](http://aide.sourceforge.net/) `v0.13.1-6.el5_8.2` \non CentOS 5.8 x86\\_64\n\nNotes\n-----\n\n### Installation\n\n```bash\nyum -y install aide \ncp /etc/aide.conf{,.original}\n```\n\n### Configuration\n\nThe `aide.conf` file has selinux entries which you [might want to\nredefine](http://backdrift.org/how-to-fix-aide-lgetfilecon_raw-failed-for-no-data-available-errors?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Backdrift+%28Backdrift%29)\nto prevent \"`lgetfilecon_raw failed`\" errors. Here are my definitions:\n\n```\nALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger \nEVERYTHING    = p+i+n+u+g+s+m+c+acl+xattrs+md5+ALLXTRAHASHES \nNORMAL        = p+i+n+u+g+s+m+c+acl+xattrs+md5+rmd160+sha256 \nDIR           = p+i+n+u+g+acl+xattrs \nPERMS         = p+i+u+g+acl \nLOG           = p+u+g+i+n+S+acl+xattrs \nLSPP          = p+i+n+u+g+s+m+c+acl+xattrs+md5+sha256 \nDATAONLY      = p+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger\n```\n\nRead the file, determine what you need, and add/adjust entries\naccordingly.\n\n### Initialization\n\n```bash\naide --init\n```\n\nThis creates `/var/lib/aide/aide.db.new.gz`. **Back up this file to a\nsafe and secure place off this server!** Now rename the file:\n\n```bash\nmv /var/lib/aide/{aide.db.new.gz,aide.db.gz}\n```\n\n### Checking\n\n```bash\n# On the system \naide --check \n \n# Comparing outside the system \naide --compare old.db.gz new.db.gz\n```\n", "title": "AIDE Setup Notes", "untracked": false, "uri": "/AIDE_Setup_Notes", "relativePath": "AIDE Setup Notes.md" }